Forums
Home Q&A Discussion groups Articles Ask a question Search
Learning
Events
Champions
Community
Forums
Home Q&A Discussion groups Articles Ask a question Search
Learning Events Champions
Forums
Home Q&A Discussion groups Articles Ask a question Search
Learning Events Champions

Forums

Articles
Create
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Q&A
See all
Community resources
Top groups
Explore all groups
Community resources
Learn
Community resources
Events
Community resources

Why is HSTS not enabled on CROWD? Does this interfere with application links?

Steven Brannan
Steven Brannan August 22, 2024

Our ACAS scans show HSTS is not enabled on CROWD  like it is for JIRA & Confluence. Is there a reason that it is not enabled?

Answer
Watch
Like # people like this
2159 views

1 answer

0 votes
Oleksii Melnyk
Oleksii Melnyk
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
Get recognized
August 26, 2025

Hi @Steven Brannan

I think the reason is that Crowd has historically been deployed behind a reverse proxy (NGINX, Apache, load balancer), which usually takes care of HTTPS termination and setting HSTS headers.

If your security team requires it, you can safely enable HSTS at the proxy level — it shouldn’t break application links.

Reply

Suggest an answer

Log in or Sign up to answer
Crowd
Crowd
TAGS
AUG Leaders

Atlassian Community Events

    See all events
    Community
    Forums
    FAQs Forums guidelines
    Learning
    About learning Resources
    Events
    Champions
    Copyright © 2025 Atlassian
    Privacy Policy Notice at Collection Terms Security