HowTo: Strict-Transport-Security query

[Dukeswharf]

Am I correct in assuming that the following code can be written in 'https-> force the following...'

secure.informaction.com Strict-Transport-Security: max-age=31536000; includeSubdomains;
paypal.com Strict-Transport-Security: max-age=31536000; includeSubdomains

to ensure STS for both specified sites?

[Giorgio Maone]

For sites which do implement STS, like the two you're mentioning, HTTPS enforcement is transparent and automatic. You don't need to do anything.
For other sites you can force HTTPS by just adding their domains in the box.

[Dukeswharf]

Just to be clear,

are you saying that:

1. NoScript automatically handles sites which support STS?
2. The code I exampled is redundant, or is there an instance where:

domain.com Strict-Transport-Security: max-age=31536000; includeSubdomains;

would be used?

[Giorgio Maone]

are you saying that:

1. NoScript automatically handles sites which support STS?
2. The code I exampled is redundant

Yes to both.

[Dukeswharf]

Excellent!

So I can dispose of both HTTPS-Everywhere and Force-STS/STS UI (FireFox 4.0b8) by simply specifying domains in 'https-> force the following...'?

[Giorgio Maone]

Excellent!

So I can dispose of both HTTPS-Everywhere and Force-STS/STS UI (FireFox 4.0b8) by simply specifying domains in 'https-> force the following...'?

Yep.