We are currently marking HSTS as fail if `max-age` is set to less than 1 year. I can't find any guidance going against this from policy or HSTS spec.
We are currently marking HSTS as fail if
max-ageis set to less than 1 year. I can't find any guidance going against this from policy or HSTS spec.