HSTS

The HTTP Strict Transport Security (HSTS) header helps defend against man-in-the-middle attacks by preventing unencrypted connections.

HSTS checks can be ignored with the following command:

$ mix sobelow -i Config.HSTS