How to Add HSTS and Security Headers
Add HSTS with one .htaccess line once HTTPS works everywhere, skip includeSubDomains and preload for now, and add nosniff, SAMEORIGIN and a referrer policy.
Add HSTS with one .htaccess line once HTTPS works everywhere, skip includeSubDomains and preload for now, and add nosniff, SAMEORIGIN and a referrer policy.