Re: HSTS over HTTP question. from Adam Langley on 2014-03-07 (public-webappsec@w3.org from March 2014)

From: Adam Langley <agl@google.com>
Date: Fri, 7 Mar 2014 11:40:32 -0500
To: Ingo Chao <ichaocssd@googlemail.com>
Cc: "public-webappsec@w3.org" <public-webappsec@w3.org>
Message-ID: <CAL9PXLw9W-_JrqHw5YRpKDuPvRg=AbHKqdJ=cV7=c2=hORCV9Q@mail.gmail.com>

On Fri, Mar 7, 2014 at 9:28 AM, Ingo Chao <ichaocssd@googlemail.com> wrote:
> - the HSTS is ignored when received via HTTP

It should be. Which browser do you believe is getting this wrong?


Cheers

AGL

Received on Friday, 7 March 2014 16:41:19 UTC