Rating: 1 star
Does not add the HSTS header (it doesnt work);
Settings never save.
Rating: 3 stars
On install and activation the header is inserted into requests, but the setting page does allow one to set any attributes. Users can edit the PHP as a work around. Seems overkill to have a plugin for one security related header, would make sense to offer other headers affecting XSS and sniffing for example.
]]>