Strict Transport Security - Githubissues

mnot / httplint

Python library to lint HTTP messages

MIT License

5 stars 1 forks source link

Strict Transport Security #16

Open mnot opened 5 years ago

mnot commented 5 years ago

Syntax:

     Strict-Transport-Security = "Strict-Transport-Security" ":"
                                 [ directive ]  *( ";" [ directive ] )

     directive                 = directive-name [ "=" directive-value ]
     directive-name            = token
     directive-value           = token | quoted-string

Directives MUST only appear once
Directives are case-insensitive
Directives:
- max-age (delta-seconds)
- includeSubDomains (valueless)
Not a list header; ignore subsequent
Warn if received over HTTP (not HTTPS) and not a 301; see S 7.2