1. Aktivere HTTPS beskyttelse for pågældende (sub-)domæne
I.h.t. hvorledes dette foretages på jeres respektive webhoteller...
2. Foretage den første rettelse i HTACCESS-filen:
Led i HTACCESS-filen efter: " Forcing `https://` "
Ændre:
# <IfModule mod_rewrite.c>
# RewriteEngine On
# RewriteCond %{HTTPS} !=on
# RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
# </IfModule>
Til:
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^/?(.*) https://%{HTTP_HOST}/$1 [R,L]
</IfModule>
Kilde: https://www.unoeuro.com/support/faq/general/123/(under: "Viderestilling til HTTPS")
3. Foretage den anden rettelse i HTACCESS-filen:
Led i HTACCESS-filen efter: " HTTP Strict Transport Security (HSTS)
Ændre:
#<IfModule mod_headers.c>
# Header always set Strict-Transport-Security "max-age=16070400; includeSubDomains"
# # (1) or if HSTS preloading is desired (respect (2) for current requirements):
# # Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" env=HTTPS
# # (4) respectively… (respect (2) for current requirements):
# # brader always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" "expr=%{HTTPS} == 'on'"
# </IfModule>
Til:
<IfModule mod_headers.c>
Header always set Strict-Transport-Security "max-age=16070400; includeSubDomains"
</IfModule>
Kilde: https://gist.github.com/netmagik/4d1b78487452a3c4e9fa