https://wiki.owasp.org/index.php?action=history&feed=atom&title=Talk%3AHTTP_Strict_Transport_Security 2026-04-25T14:04:03Z Revision history for this page on the wiki MediaWiki 1.27.2 https://wiki.owasp.org/index.php?title=Talk:HTTP_Strict_Transport_Security&diff=149911&oldid=prev 2013-04-16T08:36:32Z

<p></p> <table class="diff diff-contentalign-left" data-mw="interface"> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;' lang='en'> <td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td> <td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 08:36, 16 April 2013</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>I would like to make a change to this page, but would like to check it's okay first.&#160; The IIS solution currently proposed on this page technically doesn't follow the spec, as [http://tools.ietf.org/html/draft-ietf-websec-strict-transport-sec-14#section-7.2 Section 7.2] specifies that the header must not be send over non-secure connections. I have written [http://hstsiis.codeplex.com/ an open source IIS module] which implements HSTS as per the specification which I would like to reference it here, but I am concerned that it may be interpreted as advertising or some other unacceptable update. I have read the [http://en.wikipedia.org/wiki/Wikipedia:Tutorial_%28Keep_in_mind%29 Wikipedia editing guidelines] referenced from the [https://www.owasp.org/index.php/Help:Editing Help:Editing] page and this change appears to be acceptable. --[[User:Shane Argo|Shane Argo]] 02:21, 3 April 2013 (UTC)</div></td><td class='diff-marker'>&#160;</td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>I would like to make a change to this page, but would like to check it's okay first.&#160; The IIS solution currently proposed on this page technically doesn't follow the spec, as [http://tools.ietf.org/html/draft-ietf-websec-strict-transport-sec-14#section-7.2 Section 7.2] specifies that the header must not be send over non-secure connections. I have written [http://hstsiis.codeplex.com/ an open source IIS module] which implements HSTS as per the specification which I would like to reference it here, but I am concerned that it may be interpreted as advertising or some other unacceptable update. I have read the [http://en.wikipedia.org/wiki/Wikipedia:Tutorial_%28Keep_in_mind%29 Wikipedia editing guidelines] referenced from the [https://www.owasp.org/index.php/Help:Editing Help:Editing] page and this change appears to be acceptable. --[[User:Shane Argo|Shane Argo]] 02:21, 3 April 2013 (UTC)</div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2">&#160;</td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Update re: open source HSTS IIS module after receiving approval from Michael Coates via email. --[[User:Shane Argo|Shane Argo]] 08:36, 16 April 2013 (UTC)</ins></div></td></tr> </table>

Shane Argo https://wiki.owasp.org/index.php?title=Talk:HTTP_Strict_Transport_Security&diff=149086&oldid=prev 2013-04-03T02:21:08Z

<p>Created page with &quot;I would like to make a change to this page, but would like to check it&#039;s okay first. The IIS solution currently proposed on this page technically doesn&#039;t follow the spec, as ...&quot;</p> <p><b>New page</b></p><div>I would like to make a change to this page, but would like to check it's okay first. The IIS solution currently proposed on this page technically doesn't follow the spec, as [http://tools.ietf.org/html/draft-ietf-websec-strict-transport-sec-14#section-7.2 Section 7.2] specifies that the header must not be send over non-secure connections. I have written [http://hstsiis.codeplex.com/ an open source IIS module] which implements HSTS as per the specification which I would like to reference it here, but I am concerned that it may be interpreted as advertising or some other unacceptable update. I have read the [http://en.wikipedia.org/wiki/Wikipedia:Tutorial_%28Keep_in_mind%29 Wikipedia editing guidelines] referenced from the [https://www.owasp.org/index.php/Help:Editing Help:Editing] page and this change appears to be acceptable. --[[User:Shane Argo|Shane Argo]] 02:21, 3 April 2013 (UTC)</div>

Shane Argo