HSTS with Cloudflare Pages?

Hello,

today I tried the new feature cloudflare pages, I am excited. But is it possible to send the HSTS headers to the browser. Currently they are not transmitted despite the cloudflare setting being enabled.

Or am I doing something wrong there?

Gah! It sounds like Pages is missing a handful of features normally controlled by a regular account. I suggest you open a ticket. I hope they’re making a list of stuff that Pages needs.

To contact Cloudflare Customer Support, login & go to https://dash.cloudflare.com/?account=support and select get more help. If you receive an automatic response that does not help you, please reply and indicate you need more help.

2 Likes

As a follow up to this. I do indeed have HSTS headers sent to the browser. However, Hardenize complains that the domain isn’t preloaded despite this being declared in the policy.

Could this also be a teething issue with Pages or should one expected that something is incorrect on my end?

Did you submit your domain for preloading?

https://hstspreload.org/

2 Likes

Ah! Pays to be humble.

Thank you so much – I’m sorry for bothering you and the community with such a noob question.

I’ve submitted the domain for inclusion now. Guess this will take a while.

1 Like