Sorry - whitch config.php ? pls.
Let's encrypt problem with Strict Transport Security
-
- solved
- web4you
- Closed
-
-
Under /var/www/imscp/gui/plugins/LetsEncrypt/config.php or something like that
-
-
Hehe, you're welcome
-
-
Yes normally you should be able to also use http, if HSTS is not enabled for that domain or a parent domain with "includeSubdomains" flag. I cannot tell you here why your website redirects to https here. May you wrote something into your htaccess, php-redirect or something like that..
BTW: With HSTS enabled we redirect with 307 code (internal). Your redirect has type 301 (permanently)
-
-
I've edited my post.
BTW: With HSTS enabled we redirect with 307 code (internal). Your redirect has type 301 (permanently)
So seems to be because of your script or custom changes -
Flushing cache is not sufficient to get ride of HSTS properties in FF and even chrome
-