Merge pull request #2004 from letsencrypt/no-hsts-subdomains

--hsts should not use includeSubDomains
2026-07-27 00:00:44 +02:00 · 2015-12-23 16:33:26 -05:00
parent ee5206fe5a 8b50274d88
commit 0befd246fd
1 changed files with 1 additions and 1 deletions
@@ -33,7 +33,7 @@ REWRITE_HTTPS_ARGS_WITH_END = [
    https vhost"""

 HSTS_ARGS = ["always", "set", "Strict-Transport-Security",
-    "\"max-age=31536000; includeSubDomains\""]
+    "\"max-age=31536000\""]
 """Apache header arguments for HSTS"""

 UIR_ARGS = ["always", "set", "Content-Security-Policy",