Comment on Self hosting and HSTS preload domains

wildbus8979@sh.itjust.works ⁨2⁩ ⁨months⁩ ago

• wraith@lemmy.ca ⁨2⁩ ⁨months⁩ ago

  Google is the registry. They require all of the domains they control to have HSTS preload enabled.

  source

  • wildbus8979@sh.itjust.works ⁨2⁩ ⁨months⁩ ago

    Then yeah, what’s the issue with giving your subdomains a certificate?

    source

    • wraith@lemmy.ca ⁨2⁩ ⁨months⁩ ago

      I am fairly new to self hosting and just wanted to know if this was a big enough deal that I should just get a domain that doesn’t require HSTS preload. It’s one thing to tinker with an IP address on a local network for some unimportant project; it’s just intimidating to try it for real using a domain and hosting my own data.

      I’m just a little nervous tbh. Thanks for the help!

      source

      • wildbus8979@sh.itjust.works ⁨2⁩ ⁨months⁩ ago

        Not much to be nervous about, you can’t fuck it up anymore than it already is since the HSTS is preloaded ;) ACME/Let’sEncrypt is pretty easy to setup

        source