search

sasa1977 / site_encrypt

Integrated certification via Let's encrypt for Elixir-powered sites
MIT License
462 stars 33 forks source link

Does this work with HSTS? #60

Open hunterboerner opened 1 month ago

hunterboerner commented 1 month ago

Hi,

Does this still work with HSTS enabled? Does the HSTS prevent letsencrypt from accessing the proof of ownership over HTTP?

Thanks, Theron

sasa1977 commented 1 month ago

I tried to look for that info, but couldn't find a reliable confirmation. I would expect it to work, i.e. I'd expect letsencrypt to ignore the HSTS header, but I'm not sure, so someone needs to try it out :-)