According to the MDN article, HSTS header should be included in response to first https request. Does that mean response header for OPTION request should contain HSTS header as well?
According to the MDN article, HSTS header should be included in response to first https request. Does that mean response header for OPTION request should contain HSTS header as well?