Am 04.06.2014 10:55, schrieb Dietmar Maurer: >> wouldn't it make sense if pveproxy generally set the Strict-Transport-Security >> Header? > > Why? > so everything is forced to be encrypted otherwise the browser won't load it