Hallo zusammen,
wir werden in regelmäßigen Abständen von unserem Rechenzentrumsbetreiber via tenable geprüft und bekommen da immer wieder die Meldung das unser Exchange2016 (auf WinServer 2016) kein HSTS aktiv hat.
Bin der Anleitung von Frankys Web gefolgt.
https://www.frankysweb.de/exchange-server-und-hsts-http-strict-transport ...Bekomme am Ende beim Browser Test aber folgendes angezeigt
Found:
static_sts_domain:
static_upgrade_mode: UNKNOWN
static_sts_include_subdomains:
static_sts_observed:
static_pkp_domain:
static_pkp_include_subdomains:
static_pkp_observed:
static_spki_hashes:
dynamic_sts_domain: mail.
-
.de
dynamic_upgrade_mode: FORCE_HTTPS
dynamic_sts_include_subdomains: false
dynamic_sts_observed: 1732183208.465408
dynamic_sts_expiry: 1818583208.465364
static_sts_domain:
static_upgrade_mode: UNKNOWN
static_sts_include_subdomains:
static_sts_observed:
static_pkp_domain:
static_pkp_include_subdomains:
static_pkp_observed:
static_spki_hashes:
dynamic_sts_domain: mail.
-
.de
dynamic_upgrade_mode: FORCE_HTTPS
dynamic_sts_include_subdomains: false
dynamic_sts_observed: 1732183208.465408
dynamic_sts_expiry: 1818583208.465364
static_sts_domain:
static_upgrade_mode: UNKNOWN
static_sts_include_subdomains:
static_sts_observed:
static_pkp_domain:
static_pkp_include_subdomains:
static_pkp_observed:
static_spki_hashes:
dynamic_sts_domain: mail.
-
.de
dynamic_upgrade_mode: FORCE_HTTPS
dynamic_sts_include_subdomains: false
dynamic_sts_observed: 1732183208.465408
dynamic_sts_expiry: 1818583208.465364
dynamic_sts_include_subdomains: false sollte dabei eigentlich true zurückgeben.#
Bin ein bisschen ratlos.