a year ago
HSTS support implemented for enhanced security
Q1-2025 Release
To ensure the utmost security, headers for HSTS (or HTTP Strict Transport Security) were implemented throughout the platform so that all initial, unsecure HTTP requests to BlueConic are automatically upgraded to HTTPS.
HSTS headers are enabled by default on all tenants with a max-age that is initially set to 2 minutes. In a follow-up release, the max-age will be set to 2 years, which aligns with industry standards in web security.