Mercurial > prosody-wiki

annotate mod_strict_https.wiki @ 415:720b8a84ecf9

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
add note about simple built-in captcha
author Kim Alvefur <zash@zash.se>
date Fri, 17 Jan 2014 00:52:58 +0100
parents 356e38c7254d
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
370
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
1 #summary HTTP Strict Transport Security
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
2
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
3 = Introduction =
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
4
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
5 This module implements [https://tools.ietf.org/html/rfc6797 HTTP Strict Transport Security]
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
6 and responds to all non-HTTPS requests with a `301 Moved Permanently` redirect to the HTTPS
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
7 equivalent of the path.
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
8
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
9 = Configuration =
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
10
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
11 Add the module to the `modules_enabled` list and optionally configure the specific header sent.
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
12
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
13 {{{
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
14 modules_enabled = {
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
15 ...
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
16 "strict_https";
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
17 }
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
18 hsts_header = "max-age=31556952"
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
19 }}}
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
20
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
21 = Compatibility =
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
22 ||trunk||Works||
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
23 ||0.9||Works||
356e38c7254d mod_strict_https: Add page
Kim Alvefur <zash@zash.se>
parents:
diff changeset
24 ||0.8||Doesn't work||