戻る
-
タイトル
HTTP Strict Transport Security may not be configured, or missing from HTTPs Server -
説明
HTTP Strict Transport Security (HSTS) is not configured by default, and may be missing for the Active Roles sites. -
原因
This is by design. This is a setting controlled by IIS, and is not enabled by default as some environments may not use HTTPSs as the preferred routing for traffic.
-
対策
SOLUTION
To highlight the importance securing traffic for all Active Roles sites and make things easier for Active Roles administrators, we have introduced the feature Force SSL Redirection in Active Roles 7.4.X.
See the following link section Configure Web interface for secure communication here: Active Roles 7.4.3 - Administration Guide