Enabling HSTS header via web config for IIS 10 RRS feed

  • Question

  • User-173333858 posted


    I need to enable HSTS header for my website on IIS 10. But the solutions I have come across are for higer versions of IIS. Can someone tell me how I can do that? This has been given as a possible solutin:

    <site name="siteName" id="1">
        <application ...>
        	<!-- application tags -->
            <!-- port binding -->
        <hsts enabled="true" max-age="31536000" includeSubDomains="true" redirectHttpToHttps="true" />

    But this does not work for IIS 10.

    Tuesday, September 17, 2019 2:52 PM

All replies