Our domain needs to be removed from the HSTS preload list.
Google will remove our domain from the HSTS preload list Aug 25. How can we ensure and verify that it is removed from the Mozilla list, too?
Google will remove our domain from the HSTS preload list Aug 25. How can we ensure and verify that it is removed from the Mozilla list, too?
Alle Antworten (2)
Firefox won't be updated by then, but you should be able to instruct Firefox upon connection that HSTS is no longer required by using max-age=0. See:
Many thanks for the fast response! However, our issue is with Internet Explorer. Microsoft is using the mozilla list to update Internet Explorer. Can we somehow accelerate our removal from this list? Our ebusiness team already removed the "preload" directive from the strict transport security header of our web sites. However, we seem to be still on the Mozilla preload list.