keybase / keybase/keybase-issues

Add the preload key to Strict-Transport-Security for keybase.pub

Open
#3,095 0 comments 2 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

https://keybase.io/
`Strict-Transport-Security:max-age=31536000; includeSubdomains; preload`

https://keybase.pub/
`Strict-Transport-Security:max-age=31536000; includeSubDomains;`

Please add preload to keybase.pub as well so we can preload HSTS settings into browsers. Thanks.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by checking the current Strict-Transport-Security response for https://keybase.pub/ and compare it with https://keybase.io/. Locate the keybase.pub deployment or configuration that controls this header, add the preload directive, and verify that the served header includes it.

Written by the indexing model from the issue text.

Assessment

Domain
security, web-dev
Issue type
Feature
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.