Canonical Redirect Pitfalls with HTTP Strict Transport Security (2010)

coderrr.wordpress.com

8 pointsdiafygi1 comment

It looks like all the problems raised would be solved by using the option includeSubDomains in the HSTS header on paypal.com