HSTS not working
rshiv
HOBBYOP

2 years ago

Hi,

I am hosting a fastapi with railway service.

I have used app.add_middleware(HSTSMiddleware) command , but still HSTS is not enabled.

Can anyone point to me to the docs to make this work.

4 Replies

brody
EMPLOYEE

2 years ago

How have you determined that the HSTS headers have not been set?

rshiv
HOBBYOP

2 years ago

curl -I domain , doesn't give the security headers.

brody
EMPLOYEE

2 years ago

Are the headers present when you curl your locally running app?

What specific headers do you expect to see?

rshiv
HOBBYOP

2 years ago

Nope no special header.

Loading...