HSTS preloading should be Opt-In
ojullien opened this issue · 0 comments
ojullien commented
do not include the preload directive by default.
The preload directive will have long-term consequences. If the HTTPS configuration is wrong, broken or we don't want to use HTTPS anymore, we will experience problems.