Comment Comment by alberth Doesn’t returning a 403 on HTTP break HSTS?https://security.stackexchange.com/questions/122441/should-h...Doesn’t HSTS require only responding to a user via HTTPS (even for error codes). parent alberth 2 years ago
https://security.stackexchange.com/questions/122441/should-h...
Doesn’t HSTS require only responding to a user via HTTPS (even for error codes).