HSTS preload support

[RoneyThomas]

I would really like firebase support HSTS preload for hosting rules. Currently firebase sets HSTS to strict-transport-security:max-age=31556926. I would like it be strict-transport-security:max-age=31536000; includeSubDomains; preload. So that i can add my domain to HSTS preload list. I tried to set it via hosting rules but got an error saying not supported.

      {
        "source": "**",
        "headers": [
          {
            "key": "strict-transport-security",
            "value": "max-age=31536000; includeSubDomains; preload"
          }
        ]
      }

[mbleigh]

Responded to mailing list version of this here.

Any movement on this? I'd love to recommend a domain or two already preloaded with @lgarron's HSTS preload list be hosted with Google's Firebase but if they were to move them now the domains would be disqualified and removed from the list by some browsers.

[do-io]

@mbleigh has there been any movement on allowing hsts preload on firebase configs? Is it roadmapped?