Support for Strict-Transport-Security HTTP on API server
Open
- Dominant language
- Go
- Stars
- 9.5k
- Forks
- 1.2k
- PR merge metrics
- No merged PRs in 30d
Description
Is there an option to enable HSTS on the cfssl serve command ?
Strict-Transport-Security (https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security) HTTP response header
Kind regards
Contributor guide
Research direction
Start with the cfssl serve command and the linked MDN description of the Strict-Transport-Security response header. Determine where serve options and HTTP responses are handled, then verify that the requested option enables the header on API responses and that its behavior is covered by the relevant existing tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- api, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100