Actions
Bug #7574
closedNon-compliant Strict Transport Security (STS)
Start date:
03/23/2022
Due date:
% Done:
100%
Estimated time:
To be discussed:
Description
Nessus info¶
Synopsis¶
The remote web server implements Strict Transport Security incorrectly.
Description¶
The remote web server implements Strict Transport Security. However, it does not respect all the requirements of the STS draft standard.
Links and related¶
https://www.tenable.com/plugins/nessus/42823
http://www.nessus.org/u?2fb3aca6
Related issues
Updated by Rajmund Hruška over 2 years ago
- Status changed from New to Feedback
- Assignee set to Rajmund Hruška
- % Done changed from 0 to 100
- To be discussed changed from No to Yes
I read the linked article and it seems to me that the only issue is the Session cookie not marked Secure, which is solved in #7573.
Updated by Rajmund Hruška over 2 years ago
- Related to Bug #7573: Cookies in default configuration are not marked Secure added
Updated by Rajmund Hruška over 2 years ago
- Status changed from Feedback to Closed
- To be discussed deleted (
Yes)
So, as we discussed on the meeting we think it is really related to the cookies issue (#7573) so it should be resolved now.
Actions