Day: June 27, 2016

If you enabled HSTS on your site, you’ll have to clear it from your browser after you disabled it again. Otherwise, your site willl keep loading over SSL. There are two ways to do this. The first sets the .htaccess header, which resets it for all users: Resetting the HSTS header using the .htaccess If you set the expiration time on your HSTS header in the .htaccess to zero, the HSTS header should expire immediately. <IfModule mod_headers.c> Header set Strict-Transport-Security