# HSTS Missing From HTTPS Server for elasticsearch **URL:** \ **Category:** Elasticsearch\ **Tags:** elastic-stack-security\ **Created:** [February 7, 2024, 2:54am UTC](https://discuss.elastic.co/t/hsts-missing-from-https-server-for-elasticsearch/352694 "2024-02-07T02:54:08Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![kam89](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/kam89/32/122467_2.png) [@kam89](https://discuss.elastic.co/u/kam89)\ **Post date:** [February 7, 2024, 2:54am UTC](https://discuss.elastic.co/t/hsts-missing-from-https-server-for-elasticsearch/352694/1 "2024-02-07T02:54:08Z")
Hi everyone, Good day and hope all of you are doing great! I am setting up an ELKStack server (version 8.12.0), mainly to do for testing purpose for data ingestion and our IT security team had run an assessment test before allowing the access, and flag out this HSTS Missing From HTTPS Server for elasticsearch (port 9200). I have read an old post here: [HSTS configuration for ElasticSearch](https://discuss.elastic.co/t/hsts-configuration-for-elasticsearch/260304) Just trying my luck, are we able to enable this HSTS for elasticsearch? Many thanks and Best Regards from Kuala Lumpur, Malaysia. ---
**Author:** ![TimV](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/timv/32/13162_2.png) [@TimV](https://discuss.elastic.co/u/TimV)\ **Post date:** [February 7, 2024, 4:47am UTC](https://discuss.elastic.co/t/hsts-missing-from-https-server-for-elasticsearch/352694/2 "2024-02-07T04:47:20Z")
The answer you linked to is still applicable. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [March 6, 2024, 4:48am UTC](https://discuss.elastic.co/t/hsts-missing-from-https-server-for-elasticsearch/352694/3 "2024-03-06T04:48:00Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.