Contact
Contact
Email
Email
Cancel
Start searching
This search is based on elasticsearch and can look through several thousand pages in miliseconds.
Learn more
punkt.de
Support

What does the warning "The 'Strict-Transport-Security' HTTP header is not configured to at least '15552000' seconds" mean in the server settings?

HTTP Strict Transport Security (HSTS) is a standardized security mechanism that Nextcloud uses to instruct the user’s browser to allow only encrypted connections for this domain for a defined period (at least half a year) going forward.

Since this is a measure that affects the Nextcloud user’s browser behavior, we ship Nextcloud without this option enabled. We’re happy to enable HSTS upon request and set the desired time period.