HSTS is forcing my browser requests to https

What is HSTS?

HSTS stands for HTTP Strict Transport Security. This is a security protocol used to force secure transport of resources to the viewer of the webpage. This is communicated to the server through the header field named Strict-Transport-Security. This automatically forces HTTP requests to becomes HTTPS requests, regardless of whether or not this is the desired behavior of the webpage. While this in theory creates a more secure connection to the website, if the resources are unavailable using the HTTPS protocol the page will return an error to the viewer of the webpage for all affected resources.

What can I do if my site shows an error due to an improper HSTS request?

The latest versions of most major browsers Firefox, Chrome, Safari, and Opera all support HSTS header requests. The feature is set to be implemented in Internet Explorer 11 on Windows 10. Due to the nature of the service that we provide, Yottaa does not provide HSTS compatible resources on hosted sites. To clear the HSTS stored setting from your browser use the following instructions for your individual browser.

Please note that Internet Explorer does not have a feature to resolve this issue

Chrome, Opera

  1. Close all open tabs related to the page experiencing the issue.
  2. In a new tab type chrome://net-internals/#hsts.
  3. Locate the section header "Query Domain" and enter the domain which is experiencing the issue in the text field next to "Domain:" and press the button labeled "Query".
  4. Any domains that appear beneath the search query box will need to be deleted.
  5. Locate the section header "Delete Domain" and enter the domain which is experiencing the issue in the text field next to "Domain:" and press the button labeled "Delete".
  6. Repeat step 3 through 5 until the results of the query in step 3 state "Not Found"
  7. Close the browser and then re-open it, your issue should now be resolved.

Firefox

  1. Close all open tabs related to the site your are experiencing an issue with.
  2. Clear your history by clicking the menu and selecting the circular clock icon labeled "History".
  3. Select the button that says "Clear Recent History".
  4. In the menu that appears next to "Time range to clear:"" click the drop-down and select "Everything".
  5. Click "Clear Now" and close the menu.
  6. In the address bar type about:permissions and press the Enter key.
  7. On the top left hand side find the box with a magnifying glass with the text "Search Sites". Click into the box and enter the name of the site you are experiencing issues with.
  8. In the list directly beneath the search window click on the site name and then click the button in the top right hand corner labeled "Forget About This Site"
Have more questions? Submit a request

Comments

Powered by Zendesk