You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: pages/hsts.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -75,7 +75,7 @@ For a user to take advantage of HSTS, their browser does have to see the HSTS he
75
75
In addition, in many cases, **there may never be a first visit** to `https://domain.gov`. For example:
76
76
77
77
* Many federal websites redirect directly from `http://domain.gov` to `https://www.domain.gov`.
78
-
* Many federal domains that are used solely for redirects will redirect from `http://source.gov` directly to `https://destination.gov`.
78
+
* Many federal domains that are used solely for redirects will redirect from `http://domain.gov` directly to `https://destination.gov`.
79
79
80
80
In either case, `https://domain.gov` is never visited, meaning connecting clients will never see an HSTS policy with an `includeSubDomains` directive that applies to the whole zone.
0 commit comments