hsts 预加载而不被列出?
hsts preload without being listed?
如果在网站列出之前包含预加载指令,会有什么影响?
我希望它只是没有效果,但我正在努力寻找任何可靠的信息,我很担心它会导致问题。
除了使其符合包含在预加载列表中的条件外,它对浏览器没有其他影响。
网站必须在提交该指令以包含在预加载列表中之前包含此指令,因为它已被检查以避免意外预加载。但是一旦它在那里,浏览器可能会选择它(即使你没有明确提交它)。
请确保您 100% 肯定希望将您的网站包含在 HSTS 预加载中。 Many, many sites have done this without thinking it through completely and then had to request removal and wait months for this to happen, either because they didn't fully understand the consequences or they need HTTP-only sites on that domain. Preloading is basically irreversible and you are right to be nervous. To be honest I'm of the opinion that it's overkill for most sites,但其他人可能不同意。
如果在网站列出之前包含预加载指令,会有什么影响?
我希望它只是没有效果,但我正在努力寻找任何可靠的信息,我很担心它会导致问题。
除了使其符合包含在预加载列表中的条件外,它对浏览器没有其他影响。
网站必须在提交该指令以包含在预加载列表中之前包含此指令,因为它已被检查以避免意外预加载。但是一旦它在那里,浏览器可能会选择它(即使你没有明确提交它)。
请确保您 100% 肯定希望将您的网站包含在 HSTS 预加载中。 Many, many sites have done this without thinking it through completely and then had to request removal and wait months for this to happen, either because they didn't fully understand the consequences or they need HTTP-only sites on that domain. Preloading is basically irreversible and you are right to be nervous. To be honest I'm of the opinion that it's overkill for most sites,但其他人可能不同意。