setup-tool: add HSTS info box

This commit is contained in:
Jimmy Zelinskie 2015-05-22 16:09:11 -04:00
parent 4323eb58da
commit 2a25864061

View file

@ -98,6 +98,11 @@
A valid SSL certificate and private key files are required to use this option.
</div>
<div class="co-alert co-alert-info" ng-if="config.PREFERRED_URL_SCHEME == 'https'">
Enabling SSL also enables <a href="https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security">HTTP Strict Transport Security</a>.<br/>
This prevents downgrade attacks and cookie theft, but browsers will reject all future insecure connections on this hostname.
</div>
<table class="config-table" ng-if="config.PREFERRED_URL_SCHEME == 'https'">
<tr>
<td class="non-input">Certificate:</td>
@ -835,4 +840,4 @@
</div><!-- /.modal -->
</div>
</div>
</div>