{"action":"opened","issue":{"url":"https://api.github.com/repos/presidential-innovation-fellows/code-gov-web/issues/1","repository_url":"https://api.github.com/repos/presidential-innovation-fellows/code-gov-web","labels_url":"https://api.github.com/repos/presidential-innovation-fellows/code-gov-web/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/presidential-innovation-fellows/code-gov-web/issues/1/comments","events_url":"https://api.github.com/repos/presidential-innovation-fellows/code-gov-web/issues/1/events","html_url":"https://github.com/presidential-innovation-fellows/code-gov-web/issues/1","id":170013861,"number":1,"title":"Upgrade HSTS header","user":{"login":"konklone","id":4592,"avatar_url":"https://avatars.githubusercontent.com/u/4592?v=3","gravatar_id":"","url":"https://api.github.com/users/konklone","html_url":"https://github.com/konklone","followers_url":"https://api.github.com/users/konklone/followers","following_url":"https://api.github.com/users/konklone/following{/other_user}","gists_url":"https://api.github.com/users/konklone/gists{/gist_id}","starred_url":"https://api.github.com/users/konklone/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/konklone/subscriptions","organizations_url":"https://api.github.com/users/konklone/orgs","repos_url":"https://api.github.com/users/konklone/repos","events_url":"https://api.github.com/users/konklone/events{/privacy}","received_events_url":"https://api.github.com/users/konklone/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-08-08T20:11:25Z","updated_at":"2016-08-08T20:11:25Z","closed_at":null,"body":"First of all, it is super awesome that code.gov launched with HTTPS and HSTS. Thank you so much!\r\n\r\nEven better would be to get code.gov's subdomains taken care of for perpetuity, which can be done by updating the HSTS header to be:\r\n\r\n```\r\nStrict-Transport-Security: max-age=31536000; includeSubDomains; preload\r\n```\r\n\r\nMore details [can be found here](https://https.cio.gov/hsts/), but this will let code.gov get preloaded into browsers, and will ensure that any subdomain gets enforced as HTTPS from the get go. \r\n\r\nIt's much easier to do this now than later, so I encourage swapping out the header before the site grows large. Thank you again for prioritizing HTTPS/HSTS support for launch!"}}
{"actor":{"display_login":"konklone"}}