[fedora-websites] Issue #1030: Fedoramagazine should provide HSTS

[Christoph Kern]

sheogorath reported a new issue against the project: `fedora-websites` that you are
following:
``
The Fedoramagazine websites doesn't provide a [HSTS
header](https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security). It is a security
best practice to provide HSTS these days in order to have everyone using HTTPS by default
and prevent downgrade attacks.

https://hstspreload.org/?domain=fedoramagazine.org
``

To reply, visit the link below or just reply to this email
https://pagure.io/fedora-websites/issue/1030

[Ben Cotton]

bcotton added a new comment to an issue you are following:
``
@jasonbrooks, @misc is this something you can help with?

@sheogorath this site isn't a part of the Fedora websites, but there's no better
tracker for it, so we'll leave it here.
``

To reply, visit the link below or just reply to this email
https://pagure.io/fedora-websites/issue/1030

[Michael S]

misc added a new comment to an issue you are following:
``
Ok, didn't see that message earlier. HSTS caused us more problem historically (like
operational problem when moving servers around, because suddenly, you need https working
to set up the new version of the website, etc, etc) than it solve.  

So closing as "no", not worth the hassle.
``

To reply, visit the link below or just reply to this email
https://pagure.io/fedora-websites/issue/1030

[Michael S]

misc added a new comment to an issue you are following:
``
(except I can't close the ticket as I do not have the required access for that)

``

To reply, visit the link below or just reply to this email
https://pagure.io/fedora-websites/issue/1030

[Ben Cotton]

The status of the issue: `Fedoramagazine should provide HSTS` of project:
`fedora-websites` has been updated to: Closed as Won't fix / Can't fix by
bcotton.

https://pagure.io/fedora-websites/issue/1030