Forum
Notifications
Clear all
Topic starter
08/09/2025 2:02 pm
Hello,
Is it possible to enable HSTS on the web UI (default port 444)? Our Nessus scanner is flagging the WebUI for not having HSTS and I have not found an option to enforce it. I suspect I could to it directly from Debian, but I wanted to check here first in case the direct method breaks things.
Thanks,
09/09/2025 1:28 pm
Good day, HSTS is based in a Hedear replied by the server with a similar content as follow:
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Currently we can't modify headers in our cherokee web server, modification headers plugin is not integrated, as soon we fix we will let you know.
Regards!
