ISSUES WITH HSTS HEADER

Question

help@ecq Author

Level 1

12 points

ISSUES WITH HSTS HEADER

Hi Support,

Our sites is currently facing an issues with safari browser regarding on handling HSTS header.

Similar cases are posted in this SITE

The sites will be able to load if the HSTS header is removed. Details on the version of web browser are as follow

Before HSTS is removed

Safari Version	Load/Unable to Load
iPhone safari version 10.0 Mobile/14F89 Safari/602.1.	✔
iPhone safari version 11.0 Mobile/15C153 Safari/604.1	❌
Version 11.0.3 (13604.5.6)	❌

After we remove HTTP Strict Transport Security (HSTS)

Safari Version	Load/Unable to Load
iPhone safari version 10.0 Mobile/14F89 Safari/602.1.	✔
iPhone safari version 11.0 Mobile/15C153 Safari/604.1	✔
Version 11.0.3 (13604.5.6)	✔

Please kindly provide details on how this issues is resolved.

Thank you.

Posted on Apr 23, 2018 9:09 PM

Reply

Answer 1

etresoft

Level 9

56,656 points

Apr 25, 2018 4:43 AM in response to help@ecq

Hello help@ecq,

Double-check your certificate settings. It looks like it only works on older systems. Maybe your server is using an outdated security certificate that the newer systems refuse to accept.

Reply

Answer 2

Allan Jones

Level 9

78,266 points

Apr 24, 2018 9:34 AM in response to help@ecq

We are not Apple support but rather end users helping other end users. I think your question can be better handled in the Developers' forum section. More responders there are pros doing similar jobs as yours. I will ask the Hosts to move your question there.

Reply