As many customers asked for it, we’re happy to announce that Microsoft Exchange Server now officially supports HTTP Strict Transport Security, also known as HSTS.
What is HSTS and how can it help p...
Updated Aug 31, 2023
Version 2.0
Blog Post
The_Exchange_Team Nino_Bilic I was looking the article to enable HSTS, I found one of the pre-requisites that cert should not be expired so here which certificate article is talking about?
one of my on-premise Federation cert got expired, I am hoping that would impact if I enable HSTS?
Second, my all users moved to Exchange online and we do not host any of the user on Exchange server , we only do mail relay.
Can I expect an issue ?
third, I am going to use below steps to enable HSTS.
- Login to each Exchange servers.
- Double click to open Internet Information Server
- Click on HTTP Response Headers.
- Click on Add... in the Actions panel
- Enter the following values in the Add Custom HTTP Response Headers dialog box:<
Name: Strict-Transport-Security
Value: max-age=31536000
- Close the IIS Manager after confirmation.
Please advise.