setup-tool: add HSTS info box

This commit is contained in:
Jimmy Zelinskie 2015-05-22 16:09:11 -04:00 committed by Joseph Schorr
parent 5db4e58e16
commit 5db790bb30

View file

@ -98,6 +98,11 @@
A valid SSL certificate and private key files are required to use this option.
</div>
<div class="co-alert co-alert-info" ng-if="config.PREFERRED_URL_SCHEME == 'https'">
Enabling SSL also enables <a href="https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security">HTTP Strict Transport Security</a>.<br/>
This prevents downgrade attacks and cookie theft, but browsers will reject all future insecure connections on this hostname.
</div>
<table class="config-table" ng-if="config.PREFERRED_URL_SCHEME == 'https'">
<tr>
<td class="non-input">Certificate:</td>
@ -841,4 +846,4 @@
</div><!-- /.modal -->
</div>
</div>
</div>