Where HSTS has to be enabled?

Vote count:

-1

I have this sensitive application that is placed behind a web application firewall and we would want HSTS to be enabled for the service. I was wondering if HSTS has to be enabled on the WAF or is it on the server itself?

asked 2 mins ago

bAd bOy

7

Where HSTS has to be enabled?