My personal site
cherry.computer
cherry.computer
htmx
tailwind
axum
askama
feat: increase HSTS age to one month
New HSTS preload guidelines suggest to me that any further changes
(including enabling preloading) are unnecessary these days as browsers
will automatically try to upgrade to HTTPS anyway.
+1
-1
server/src/main.rs
+1
-1
server/src/main.rs
···
42
42
.layer(CompressionLayer::new())
43
43
.layer(SetResponseHeaderLayer::overriding(
44
44
HeaderName::from_static("strict-transport-security"),
45
-
HeaderValue::from_static("max-age=300; includeSubDomains"),
45
+
HeaderValue::from_static("max-age=2592000; includeSubDomains"),
46
46
)),
47
47
);
48
48