Skip to content

Commit 6f03a16

Browse files
authored
clarify that these mean HTTP or HTTPS requests (#240)
1 parent c50edf9 commit 6f03a16

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

pages/guide.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -102,11 +102,11 @@ HSTS mitigates the security impact of connections over port 80, while allowing a
102102

103103
### What about network services that don't actually serve web content?
104104

105-
M-15-13 covers any publicly accessible network service that responds to HTTP requests. This includes network services that don't serve content, but only return HTTP headers, or blank or insubstantial content.
105+
M-15-13 covers any publicly accessible network service that responds to HTTPS or HTTP requests. This includes network services that don't serve content, but only return HTTP headers, or blank or insubstantial content.
106106

107-
This also includes services that respond to HTTP requests on non-standard ports (ports other than 80 or 443), whether or not those services are included in external scans provided to agencies.
107+
This also includes services that respond to HTTPS or HTTP requests on non-standard ports (ports other than 80 or 443), whether or not those services are included in external scans provided to agencies.
108108

109-
Network services which do not respond to HTTP requests are not included in the scope of M-15-13.
109+
Network services which do not respond to HTTPS or HTTP requests are not included in the scope of M-15-13.
110110

111111
### What does "all Federal agency domains or subdomains" include?
112112

0 commit comments

Comments
 (0)