w3c / webmediaapi

Web Media API specification
https://w3c.github.io/webmediaapi/
31 stars 19 forks source link

add HSTS (RFC 6797) to the security section #367

Closed jpiesing closed 2 days ago

jpiesing commented 2 days ago

The security section has upgrade-insecure-requests but not HSTS (aka RFC 6796).

We should consider adding HSTS. According to caniuse.com it's been supported in all browsers for many years, more than 10 years for most of them.

jpiesing commented 2 days ago

Double submission in error.