Forum Discussion
dipta_03_149731
Nimbostratus
NimbostratusI have applied a HSTS-Irule to a virtual server bit user is getting Invalid Strict-Transport-Security header
I have applied below Irule to a Virtual server:
when HTTP_RESPONSE {
HTTP::header insert Strict-Transport-Security "max-age=31536000; includeSubDomains"
}
While accessing the URL from brows...
boneyard
MVP
MVPAlso user gets a note not to use Sha1 certificate.
that is different then using a specific cipher, you can only fix that by using a certificate signed with SHA-2 hash. see also: https://www.symantec.com/page.jsp?id=sha2-transition
