I am using SetEnvIF Host "^[dev\.domain\.com]$|^[\w+\.dev\.domain\.com]$" AllowDomain=1 SetEnvIF AllowDomain HTTPS HEADER_PROCESSING=1 <IfModule mod_headers.c> Header add Strict-Transport-Security "max-age=15768000;includeSubDomains" env=HEADER_PROCESSING </IfModule> To avoid sending the header to dev.domain.com or xx.dev.domain.com But instead it doesn’t send the header to any sites. thanks |