News for hackers. Stuff that matters.

A comment on Comparison of SSL Labs TLS Scores with Different Go Versions. Parent comment

Re:Comparison of SSL Labs TLS Scores with Different Go Versions by currysausage on Wednesday February 03, 2016 @05:56PM (#11030560)
> If you use Hiawatha you get A+ with out of the box settings.

Which means they set long HSTS by default, which will bite you quite badly if you're not ready yet for an irreversible HTTPS rollout. But yeah, A+ looks awesome on comparison tables, doesn't it?

[ Parent | on HN ]
Re:Comparison of SSL Labs TLS Scores with Different Go Versions by faeron on Thursday February 04, 2016 @05:00AM (#11032966)
No, it does not set a HSTS header by default. And the out of the box rating is A, not A+. However, with a simple setting you enable the HSTS header, which gives you the A+ rating.
[ Parent | on HN ]