How to Set Up HSTS
setting up HSTS is as simple as adding a Header directive to your server or .htaccess configs:
Header always set Strict-Transport-Security "max-age=31536000"
Save and exit the file - you now have HSTS configured.
Checking HSTS
Once the HSTS header has been added, you should be able to see Strict-Transport-Security: max-age=31536000 when viewing response headers. Running a curl -i script directed to one of the configured pages will show you the headers in addition to the site content.
