>> Tomcat. >>> I configured HSTS in Tomcat and it works well. >>> When I do a pen-test with burpsuite it complains that HSTS header is >> missing on 401 responses. >>> I couldn’t find much information about whether HSTS makes sense for >> error pages. >>> >>> It seems that...