|
|
|
|
|
by bonzoesc
5080 days ago
|
|
strict-transport-security:max-age=2592000; includeSubDomains
It has a maximum age, not an expiration date. If I visit gmail today, that STS header will expire a month from now[1].If I visit again tomorrow, the browser-cached version of that header will be updated with a new expiration date, and expire a month from tomorrow, not now. 1: http://www.wolframalpha.com/input/?i=2592000%20seconds edit: I think we're agreeing. |
|