• The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Issue HSTS issue with www forward

klowet

Basic Pleskian
Server operating system version
Debian 11
Plesk version and microupdate number
18.0.46
Hi

I have a question / problem with the SSL-IT HSTS implementation. When I test the hosted websites on ssllabs.com, then the result is that HSTS is not configured and OCSP stapling is not active. When I test on hstpreload.org, I get two errors:

Code:
Error: No HSTS header

Response error: No HSTS header is present on the response.

Error: HTTP redirects to www first

`http://example.com` (HTTP) should immediately redirect to `https://example.com` (HTTPS) before adding the www subdomain. Right now, the first redirect is to `https://www.example.com`. The extra redirect is required to ensure that any browser which supports HSTS will record the HSTS entry for the top level domain, not just the subdomain.

1662038180342.png
 
Please check your domain with the following command:

Code:
# curl -s -D- https://domain.com | grep -i Strict
strict-transport-security: max-age=63072000; includeSubDomains

If you see the same output, that means HSTS is really enabled for your domain.
 
There is no output.
Without strict: 301 Moved Permanently. And a location header to forward to the domain including www.
 
Back
Top