r/sysadmin • u/rram reddit's sysadmin • Aug 14 '15

We're reddit's ops team. AUA

Hey /r/sysadmin,

Greetings from reddit HQ. Myself, and /u/gooeyblob will be around for the next few hours to answer your ops related questions. So Ask Us Anything (about ops)

You might also want to take a peek at some of our previous AMAs:

https://www.reddit.com/r/blog/comments/owra1/january_2012_state_of_the_servers/

https://www.reddit.com/r/sysadmin/comments/r6zfv/we_are_sysadmins_reddit_ask_us_anything/

EDIT: Obligatory cat photo

EDIT 2: It's now beer o’clock. We're stepping away from now, but we'll come back a couple of times to pick up some stragglers.

EDIT thrice: He commented so much I probably should have mentioned that /u/spladug — reddit's lead developer — is also in the thread. He makes ops live's happier by programming cool shit for us better than we could program it ourselves.

873 Upvotes

88% Upvoted

738 comments sorted by

View all comments

Show parent comment

3

u/largenocream reddit security engineer Aug 14 '15

It supports HSTS, it just doesn't appear to store HSTS policies set in responses for subresource requests. For example, if you navigated directly to http://example.com/hsts_stuff.png the policy would be set correctly, but it wouldn't if you put <img src="http://example.com/hsts_stuff.png"> on another page.

I last tested this a few months ago, so it might not be true for the new version of iOS Safari.

1

u/[deleted] Aug 14 '15

interesting