Enum Hsts

pub enum Hsts {
    Disable,
    Enable(u32),
    IncludeSubDomains(u32),
    Preload(u32),
}

HTTP Strict Transport Security configuration settings and max-age in seconds for the links redirector.

The max-age indicates for how long the server’s HSTS setting should be saved by browsers, with 2 years (63072000 seconds) being recommended. For preloading to work, max-age must be at least 1 year (31536000 seconds). Setting max-age to 0 will clear a browser’s HSTS setting for the redirection website on next request, allowing it to perform HTTP (without TLS) requests again.

Caution:

The IncludeSubDomains and Preload settings may have lasting unintended effects on unrelated HTTP servers (current and future) running on subdomains of the links host, and may even render those websites unusable for months or years by requiring browsers to use HTTPS (with TLS) exclusively when doing HTTP requests to those domains. The Enable setting, however, only impacts the exact domain it is used from, so should only impact the links redirector server itself. It is recommended to start testing HSTS (especially IncludeSubDomains and Preload) with a short max-age initially, and to test any possible impact on other websites hosted on the same domain and on its subdomains.

See also:

• https://hstspreload.org/
• https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security
• https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

Variants

Disable

Don’t send the HTTP Strict Transport Security header

Enable(u32)

Send the HSTS header without the preload or includeSubDomains attributes

IncludeSubDomains(u32)

Send the HSTS header with the includeSubDomains attribute, but without preload

Caution:

This may have temporary unintended effects on unrelated HTTP servers running on subdomains of the links host. Make sure that this won’t cause any problems before enabling it and try a short max-age first. More info on https://hstspreload.org/, https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security, and https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security.

Preload(u32)

Send the HSTS header with the preload and includeSubDomains attributes

Caution:

This may have lasting unintended effects on unrelated HTTP servers (current and future) running on subdomains of the links host, and may even render those websites unusable for months or years.

Read https://hstspreload.org/, https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Strict-Transport-Security, and https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security, and make sure that this won’t cause any problems before enabling it.

Trait Implementations

impl Clone for Hsts

fn clone(&self) -> Hsts

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for Hsts

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for Hsts

fn default() -> Self

Returns the “default value” for a type.

impl PartialEq for Hsts

fn eq(&self, other: &Hsts) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for Hsts

impl Eq for Hsts

impl StructuralPartialEq for Hsts