vendredi 19 novembre 2021

Is Strict-Transport-Security needed in error pages (400, 401, 403, 500...)?

I have a doubt related to the hsts response header. I'm developing a web application and currently I covered all the endpoints (with 200 ok responses)... this means that all the endpoints will return the hsts header when the response is 200. I don't know if it is needed for the server errors too. Thanks!




Aucun commentaire:

Enregistrer un commentaire