Update README.md

[antonmedv]

Something like this.

[phanan]

Shouldn't these 3 lines

RewriteEngine on
RewriteCond %{HTTPS} !on
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

be kept?

[antonmedv]

Not sure, but think Strict-Transport-Security must be on every HTTP request. It's better to ask some one else on StackExchange. 😄

[phanan]

Apparently this can and should be set in the <VirtualHost> directive instead, no?

On Wed, Feb 25, 2015 at 10:01 PM, Anton Medvedev [email protected]
wrote:

Not sure, but think Strict-Transport-Security must be on every HTTP
request. It's better to ask some one else on StackExchange. [image:
😄]

—
Reply to this email directly or view it on GitHub
#48 (comment).