daohualiuxiang
/
AspNetCore.Docs
mirror of https://github.com/dotnet/AspNetCore.Docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Clarify OR when describing HSTS for Linux+nginx (#18836)

pull/18842/head
Kirk Larkin 2020-06-17 23:13:58 +01:00 committed by GitHub
parent f321c59eba
commit 6e204c6e7b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
aspnetcore/host-and-deploy/linux-nginx.md
View File

@ -369,7 +369,10 @@ Configure the app to use a certificate in development for the `dotnet run` comma
* Adding an `HTTP Strict-Transport-Security` (HSTS) header ensures all subsequent requests made by the client are over HTTPS.
* Don't add the HSTS header or chose an appropriate `max-age` if HTTPS will be disabled in the future.
* If HTTPS will be disabled in the future, use one of the following approaches:
* Don't add the HSTS header.
* Choose a short `max-age` value.
Add the */etc/nginx/proxy.conf* configuration file: