No HSTS header is present on the response.

  • Resolved devsaredead

    (@devsaredead)


    5 months, 1 week ago

    The test returns that HSTS requires “subdomain” and “preload” directives enabled. However, in the plugin settings it sounds like they should be activated only if the site is on https. Mine is, so why I get a “No HSTS header is present” error whereas I had a A+ result before?

    Moreover, it degraded from A+ to D and mentions that inclusion in the preload list has permanent consequences and is not easy to undo. So how do I go back to normal now?

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author Andrea Ferro

    (@unicorn03)

    Hi @devsaredead,

    Thank you for your thread in the plugin settings are the HSTS entries checked?

    Thread Starter devsaredead

    (@devsaredead)

    you mean the “duplicates”? yes they are.

    If I use a manual htaccess method I get A+, so the plugin is somehow less reliable than the manual option

    Plugin Author Andrea Ferro

    (@unicorn03)

    Hi @devsaredead,

    I mean if in the HSTS section the items “subdomain” and “preload” are selected (ticked).

    So I can rule out mistakes

    Thread Starter devsaredead

    (@devsaredead)

    they were not initially when I had A+, but once I enabled them the test downgraded

    Plugin Author Andrea Ferro

    (@unicorn03)

    Hi @devsaredead,

    I ask you if you can write me [email protected] so I can check and give you a solution

    Plugin Author Andrea Ferro

    (@unicorn03)

    Hi @devsaredead,

    to update this topic, I confirm that the issue was caused by activating the “resolve duplicate headers” feature, if you encounter the error in this thread try checking if you selected resolve duplicate headers.

    The feature is only useful if you are experiencing duplicate headers.

    thank you for this topic and if I have any further questions or concerns I am here

Viewing 6 replies - 1 through 6 (of 6 total)
  • You must be logged in to reply to this topic.