HTTP Public Key Pinning (HPKP) middleware
This header has been deprecated citing risks of misuse, and therefore is not recommeded. This module (
hpkp) will not receive any new feature development but will still be maintained.
Be very careful when deploying this—you can easily misuse this header and cause problems. Chrome has dropped support for HPKP citing risks of misuse.
const express =const hpkp =const app =const ninetyDaysInSeconds = 7776000app
true will change the header from
Don't let these get out of sync with your certs! It's also recommended to test your HPKP deployment in
reportOnly mode, or alternatively, to use a very short
maxAge until you're confident your deployment is correct.