Should we consider Allow enabling of HSTS

[danb35 (Dan)]

@dasois

Header always set Strict-Transport-Security “max-age=63072000”

Does this really need to be set to two years? Seems excessive.