How to enable HSTS (HTTP Strict Transport Security) in Red Hat OpenStack Platform

Issue

• The Strict-Transport-Security header is not present when using SSL for public endpoints or when using TLSe
• HTTP Strict Transport Security (HSTS) is negotiated between the browser and the web server, and is important to protect from downgrade attacks, man-in-the-middle attacks, and session hijacking. It does so by preventing the page from being loaded without HTTPS.