Skip to content

Commit bae25a2

Browse files
konklonekonklone
committed
coda
1 parent c84f661 commit bae25a2

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

‎pages/guide.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -115,3 +115,5 @@ In practice, to deploy HSTS while using federally issued certificates, an agency
115115

116116
* Federally issued certificates may be practical for web services whose users can be consistently expected to trust the issuing federal certificate authority (CA). Users whose devices do not trust the issuing CA will experience a connection failure and be unable to use the web service.
117117
* Federally issued certificates will not be practical for web services whose users may not always be expected to trust the issuing federal certificate authority. These web services will likely require the use of a certificate from a publicly trusted (commercial) CA.
118+
119+
Whatever strategy an agency employs to manage the use of federally issued certificates, it should allow the practical deployment of [HSTS](/hsts/) across all of its publicly accessible websites and web services.

0 commit comments

Comments
 (0)