SSL: How to activate HSTS

Step 1:

The basis for using HSTS is an active SSL certificate. You can find the corresponding tutorials here:

Certificate Installation

Step 2:

In order to enable HSTS, please log in to your KAS (Technical Administration) and click the menu item Domain on the left and the Edit icon right next to the respective domain.

Step 3:

Right next to SSL protection, click the edit icon.

Step 4:

On the Overview tab you can find the option Enable HSTS.

HSTS (HTTP Strict Transport Security) is a security mechanism for HTTPS connections. It allows to determine a time frame within which the browser of the website visitor is only allowed to access the website encrypted. All up-to-date browsers support that feature.

Attention: If a certificate will be removed later, visitors are not able to reach the website anymore! A max age value of e.g. 600000 seconds is equal to approx. 1 week.