This commit is contained in:
Zhang Huangbin 2016-01-29 17:24:36 +09:00
parent 820e79f33e
commit a88be6c6de
4 changed files with 12 additions and 12 deletions

View File

@ -340,7 +340,7 @@ and append below settings right after `SSLEngine on` line:
# Reference:
# https://developer.mozilla.org/en-US/docs/Web/Security/HTTP_strict_transport_security
# Module mod_headers is required. 15768000 seconds = 6 months.
Header always set Strict-Transport-Security "max-age=15768000; includeSubdomains"
Header always set Strict-Transport-Security "max-age=15768000"
```
On Debian 8 and Ubuntu, run command below to make sure Apache module `headers`
@ -363,7 +363,7 @@ and append below settings right after `ssl on` line:
# Use HTTP Strict Transport Security to force client to use secure connections only.
# Reference:
# https://developer.mozilla.org/en-US/docs/Web/Security/HTTP_strict_transport_security
add_header Strict-Transport-Security "max-age=15768000; includeSubdomains";
add_header Strict-Transport-Security "max-age=15768000"
```
### SOGo: Fix improper settings in Apache/Nginx config file

View File

@ -369,7 +369,7 @@ and append below settings right after <code>SSLEngine on</code> line:</p>
# Reference:
# https://developer.mozilla.org/en-US/docs/Web/Security/HTTP_strict_transport_security
# Module mod_headers is required. 15768000 seconds = 6 months.
Header always set Strict-Transport-Security &quot;max-age=15768000; includeSubdomains&quot;
Header always set Strict-Transport-Security &quot;max-age=15768000&quot;
</code></pre>
<p>On Debian 8 and Ubuntu, run command below to make sure Apache module <code>headers</code>
@ -389,7 +389,7 @@ and append below settings right after <code>ssl on</code> line:</p>
<pre><code># Use HTTP Strict Transport Security to force client to use secure connections only.
# Reference:
# https://developer.mozilla.org/en-US/docs/Web/Security/HTTP_strict_transport_security
add_header Strict-Transport-Security &quot;max-age=15768000; includeSubdomains&quot;;
add_header Strict-Transport-Security &quot;max-age=15768000&quot;
</code></pre>
<h3 id="sogo-fix-improper-settings-in-apachenginx-config-file">SOGo: Fix improper settings in Apache/Nginx config file</h3>