Should you really “blindly” add includeSubdomains
to the HSTS header?
I’ve got the feeling 90 % of the “server admins” on this community don’t know what they are doing, let alone know what HSTS stands for. It would be prudent to not include includeSubdomains
without proper advice.
(And yes, you’ve added a small disclaimer, I know ;))