USPSOIG.gov HTTP Secure Transport Security/HSTS Preload
Posted: February 19, 2016 15:39:12 • By Natasha L. • 170 words
- URL: Chromium HSTS Preload List
- Started: December 2014
- Deployed: January 2015
- Role: DevOps Engineer
- Tech: IIS
In winter 2014, the USPSOIG was contacted by the 18F division of the GSA, inviting us to be among the first .gov domains to be hard-coded into the HSTS Preload List, as part of a kick-off initiative to get other agencies to follow suit. We agreed, and I was tapped to do the actual implementation. Ultimately, it wasn't very complex, but the testing involved was extensive, since we had to ensure that all of our subdomains (including internal resources) were ready. And I particularly enjoyed working with 18F; they're a great agency doing excellent work!