HTTP Strict Transport Security (HSTS) Errors and Warnings prod.app.cloud

GSA / 889-tool

Web service for determining 889 compliance of vendors

1 stars 0 forks source link

HTTP Strict Transport Security (HSTS) Errors and Warnings prod.app.cloud #173

Open JennaySDavis opened 10 months ago

JennaySDavis commented 10 months ago

https://drive.google.com/drive/folders/1BHO0cG7YaMluNvYFI2oJFtElKmlNIzjB Report Name: Production - https:/smartpay-889-prod.app.cloud.gov/ - January 2024

JennaySDavis commented 5 months ago

During a security meeting on June 9, 2024, it was confirmed that the URLs flagged were already loaded. (https://hstspreload.org/) Dan did an additional verification after the meeting and confirmed. Dan created a GSA generic request ticket for this false positive.

This issue has been resolved and is no longer listed on the June Vulnerability Scan.