atom / atom.io

🌐 A place for feedback on the atom.io website and package API
160 stars 99 forks source link

HSTS + Preloading for `atom.io` #176

Open lgarron opened 5 years ago

lgarron commented 5 years ago

Splitting this out from https://github.com/atom/atom.io/issues/126#issuecomment-443388515 Protecting all of atom.io would be pretty great: https://hstspreload.org/?domain=atom.io

HSTS headers for GH Pages are supported, but still require manual config for now. However, atom.io is served elsewhere; is it possible to send a pull request to update its header?

jasonrudolph commented 5 years ago

HSTS headers for GH Pages are supported, but still require manual config for now.

@lgarron: Can you point me to any docs for adding HSTS headers on a GitHub Pages site?

However, atom.io is served elsewhere; is it possible to send a pull request to update its header?

It's a private repository, but thanks for the offer. :bow:

lgarron commented 5 years ago

@lgarron: Can you point me to any docs for adding HSTS headers on a GitHub Pages site?

Ah, sorry, I should have mentioned the same thing as in #126. By "manual config" I mean there is no public way to do it yet. Until there is a UI (which is planned), a Hubber like me manually needs to make such a change.