{"action":"opened","issue":{"url":"https://api.github.com/repos/MaxCDN/bootstrap-cdn/issues/750","repository_url":"https://api.github.com/repos/MaxCDN/bootstrap-cdn","labels_url":"https://api.github.com/repos/MaxCDN/bootstrap-cdn/issues/750/labels{/name}","comments_url":"https://api.github.com/repos/MaxCDN/bootstrap-cdn/issues/750/comments","events_url":"https://api.github.com/repos/MaxCDN/bootstrap-cdn/issues/750/events","html_url":"https://github.com/MaxCDN/bootstrap-cdn/issues/750","id":170911881,"number":750,"title":"Enable HSTS protection for CDN assets.","user":{"login":"ScottHelme","id":5352840,"avatar_url":"https://avatars.githubusercontent.com/u/5352840?v=3","gravatar_id":"","url":"https://api.github.com/users/ScottHelme","html_url":"https://github.com/ScottHelme","followers_url":"https://api.github.com/users/ScottHelme/followers","following_url":"https://api.github.com/users/ScottHelme/following{/other_user}","gists_url":"https://api.github.com/users/ScottHelme/gists{/gist_id}","starred_url":"https://api.github.com/users/ScottHelme/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ScottHelme/subscriptions","organizations_url":"https://api.github.com/users/ScottHelme/orgs","repos_url":"https://api.github.com/users/ScottHelme/repos","events_url":"https://api.github.com/users/ScottHelme/events{/privacy}","received_events_url":"https://api.github.com/users/ScottHelme/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-08-12T16:43:06Z","updated_at":"2016-08-12T16:43:06Z","closed_at":null,"body":"Enabling HTTP Strict Transport Security will afford better protection to CDN traffic. \r\n\r\nCurrently assets can be served over HTTP or HTTPS from the CDN, there is no redirection from HTTP to HTTPS. By enabling HSTS, capable clients will automatically upgrade to using HTTPS whilst those that are not capable, or may not be capable, will remain on HTTP.  \r\n\r\nThis can be done in the following ways:\r\n\r\n1) Inject the Strict-Transport-Security header when serving assets. \r\n2) HSTS preload the CDN domain. \r\n3) A combination of 1 and 2. "}}
{"actor":{"display_login":"ScottHelme"}}