Comments (6)
nabla-c0d3
commented on July 24, 2024
Hi,
I checked the headers returned by https://www.facebook.com and didn't HSTS.
from sslyze.
Xurcr0h
commented on July 24, 2024
If I check them with Live HTTP headers (or firebug) I get a Strict-Transport-Security:max-age=15552000:preload
Thats strange
from sslyze.
nabla-c0d3
commented on July 24, 2024
Try again when you're not logged in ?
from sslyze.
Xurcr0h
commented on July 24, 2024
Still the same
from sslyze.
Xurcr0h
commented on July 24, 2024
Checked on another notebook and got the same result
from sslyze.
nabla-c0d3
commented on July 24, 2024
I did a quick investigation and www.facebook.com doesn't always send the HSTS header; it is based on the User-Agent received (perhaps so that they don't send the HSTS header for user agents that don't support it anyway). Not really something I can fix, unless I change sslyze's user agent, which doesn't seem like a good idea.
from sslyze.
Related Issues (20)
- Remove support for Python 3.7 HOT 1
- Remove support for pydantic 1.x HOT 1
- centos7+python3.11 Segmentation fault HOT 2
- Bump upper pydantic requirement HOT 2
- "Server rejected the connection" but server is healthy HOT 1
- ssl.match_hostname() is deprecated HOT 6
- _ConnectivityTesterThread stuck with uncaught error HOT 1
- Etherscan HOT 1
- Add support for Python 3.12 HOT 3
- Please support pydantic-2.5.3 HOT 1
- Scan hangs forever when "invalid padding" error occurs HOT 2
- CLI parameter negation HOT 1
- Switch to cryptography for x509 chain validation HOT 1
- Client Initiated Renegotiation False Positive HOT 1
- Please Add to the 5.1.3 Release Notes That It Is the Last Version to Support Windows 7 HOT 1
- Please bump cryptography requirement upper bound as there are known vulnerabilities in cryptography <42 HOT 2
- by default sslyze is now skipping secure header check
- JSON output breaks if OCSP response is not successful
- Build docker image for Mac (arm64) HOT 3
- [question] Does sslyze support OpenSSL 3.0+? HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from sslyze.