HSTS header is being suppressed about hsg-project HOT 3 CLOSED

It doesn't seem that AWS ELB is blocking the header; articles likehttp://blog.danielhlockard.com/implementing-perfect-forward-secrecy-on-amazon-elb/ seem to show it's possible. (My google search: https://www.google.com/#q=%22strict-transport-security%22+header+elb+aws.)

from hsg-project.

Found the solution in https://www.nginx.com/blog/http-strict-transport-security-hsts-and-nginx/ described as following:

if a block includes an add_header directive itself, it does not inherit headers from enclosing blocks, and you need to redeclare all add_header directives

from hsg-project.

@tasmo Many thanks for finding the solution!

For the record, your commit with the fix was 496e9d2

from hsg-project.