Skip to content

Instantly share code, notes, and snippets.

@goesredy
Last active December 17, 2019 05:11
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save goesredy/d33581ac7012b5a27c2dc77604cff1de to your computer and use it in GitHub Desktop.
Save goesredy/d33581ac7012b5a27c2dc77604cff1de to your computer and use it in GitHub Desktop.
Disable HTTP Strict Transport Security (HSTS) in .htaccess
<IfModule mod_headers.c>
#Header set Strict-Transport-Security "max-age=0; includeSubDomains; preload" env=HTTPS
Header always set Strict-Transport-Security "max-age=0; includeSubDomains; preload" env=HTTPS
#Exlude subdomain
#Header always set Strict-Transport-Security "max-age=31536000; preload" env=HTTPS
</IfModule>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment