boneyard
Jun 16, 2014MVP
HSTS domain
not really an F5 question, but i do use an iRule to insert the header :)
does anyone has actual experience with HSTS* and on what level it is active? i read everywhere about the HSTS domain, so i expected that if i insert the header on a server called name.domain.ext it would be active for domain.ext. but when testing this on chrome it seems to make it active for name.domain.ext only. is this expected behavior?
*) http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security