[jira] [Work logged] (ARTEMIS-4123) Enable Strict-Transport-Security header

["ASF GitHub Bot (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/ARTEMIS-4123?focusedWorklogId=837721&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-837721 ]

ASF GitHub Bot logged work on ARTEMIS-4123:
-------------------------------------------

                Author: ASF GitHub Bot
            Created on: 08/Jan/23 04:54
            Start Date: 08/Jan/23 04:54
    Worklog Time Spent: 10m 
      Work Description: jbertram merged PR #4323:
URL: https://github.com/apache/activemq-artemis/pull/4323




Issue Time Tracking
-------------------

            Worklog Id:     (was: 837721)
    Remaining Estimate: 0h
            Time Spent: 10m

> Enable Strict-Transport-Security header
> ---------------------------------------
>
>                 Key: ARTEMIS-4123
>                 URL: https://issues.apache.org/jira/browse/ARTEMIS-4123
>             Project: ActiveMQ Artemis
>          Issue Type: Improvement
>            Reporter: Domenico Francesco Bruscino
>            Assignee: Domenico Francesco Bruscino
>            Priority: Major
>          Time Spent: 10m
>  Remaining Estimate: 0h
>
> The Strict-Transport-Security header is ignored by the browser when your site has only been accessed using HTTP. Once your site is accessed over HTTPS with no certificate errors, the browser knows your site is HTTPS capable and will honor the Strict-Transport-Security header. Browsers do this as attackers may intercept HTTP connections to the site and inject or remove the header.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)