How to enable HSTS headers in Red Hat OpenShift Web Console
Issue
- Is there any way to manually enable HSTS per domain.
- How to increase Openshift Webconsole security with HSTS headers.
- The infrastructure that supports OpenShift does not enforce HTTP Strict Transport Security (HSTS), allowing potential downgrade attacks against HTTPS and the collection of data-in-transit. The list of ports identified that do not enforce HSTS.
Environment
- Red Hat OpenShift Container Platform (RHOCP)
- 4
- haproxy Route
- HSTS
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
