search

GoogleCloudPlatform / gcping

The source for the CLI and web app at gcping.com
https://gcping.com
Apache License 2.0
386 stars 57 forks source link

HTST max-age should be 2 years when preload is present #125

Open yuryu opened 1 year ago

yuryu commented 1 year ago

HTST max-age is currently set to 3,600. https://github.com/GoogleCloudPlatform/gcping/blob/0f9908c6aa8da9b7b224473abd1bcf9a8d327c08/cmd/ping/main.go#L54

However, according to https://hstspreload.org/, 2 years is recommended and 1 year is required as a minimum.