-
Notifications
You must be signed in to change notification settings - Fork 411
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Remove all Google Chrome Frame related config #154
Conversation
- Avoid revealing the server name and version number - Disable directory listing Ref: #150
The `includeSubDomains` optional directive allows the user to apply the `HTTP Strict Transport Security` rule to all of the site's subdomains: * http://tools.ietf.org/html/draft-ietf-websec-strict-transport-sec-14#section-6.1 * https://developer.mozilla.org/en-US/docs/Security/HTTP_Strict_Transport_Security Ref: #151
@Rowno thanks! Can you also add the "Retiring Chrome Frame" link to the commit message and, if you have time, update the docs to include the Chrome Frame related information (at least for Apache) ? From: "Retiring Chrome Frame"
The initial issue was mostly intended as a reminder so, this will have to wait a while till it will get pulled in, sorry. |
I'm not sure what should be added to the docs, so I'll leave that up to you. 😉 |
IIS/.Net Sections merged. |
@ChrisMcKee: I appreciate your quickness, but let's not rush into things. Google Chrome Frame is still officially supported until January 2014, so when we remove it, I think it would be nice to have a tag which still includes the Chrome Frame HTTP header hint (I will come with some proposals on tagging and other repository related things soon). |
@alrra fair enough; I'll undoubtedly need to add some new configs soon depending on what they've altered for MVC5/API2. |
@Rowno I'm going to close this in favor of the server specific issues, as some of the server will have to make some other changes first. Thanks anyhow, really appreciate the effort! |
#153