Real-world HSTS experiences

[Farmer, Jacob]

Colleagues,

We are planning to enable HSTS[1] for IDP.  Everything I can find suggests there is no adverse impact to doing this, but my support colleagues are understandably a little concerned about it.  Has anyone else gone through the experience of transitioning their IDP to support HSTS?  And if so, any fallout?

Thanks!
Jacob

[1] https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security


=========================
Jacob Farmer
Identity Management Systems
(812) 856-0186

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20160119/27755172/attachment.html>