Update README.md

phanan · Dec 8, 2017 · 30816ce · 30816ce
1 parent d92d034
commit 30816ce
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/README.md b/README.md
@@ -100,7 +100,9 @@ RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
 # on your HTTPS website to help prevent man-in-the-middle attacks.
 # See https://developer.mozilla.org/en-US/docs/Web/Security/HTTP_strict_transport_security
 <IfModule mod_headers.c>
-    Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
+    Header always set Strict-Transport-Security "max-age=31536000;"
+    # Or, if you want to force HSTS on the sudbmains as well
+    # Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
 </IfModule>
 ```