fedora-websites

#1030 Fedoramagazine should provide HSTS
Closed: Won't fix / Can't fix by bcotton. Opened by sheogorath.

Closed: Won't fix / Can't fix
Reopen Issue

The Fedoramagazine websites doesn't provide a HSTS header. It is a security best practice to provide HSTS these days in order to have everyone using HTTPS by default and prevent downgrade attacks.

https://hstspreload.org/?domain=fedoramagazine.org

@jasonbrooks, @misc is this something you can help with?

@sheogorath this site isn't a part of the Fedora websites, but there's no better tracker for it, so we'll leave it here.

Ok, didn't see that message earlier. HSTS caused us more problem historically (like operational problem when moving servers around, because suddenly, you need https working to set up the new version of the website, etc, etc) than it solve.

So closing as "no", not worth the hassle.

(except I can't close the ticket as I do not have the required access for that)

Metadata Update from @bcotton:
- Issue close_status updated to: Won't fix / Can't fix
- Issue status updated to: Closed (was: Open)
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.