Thanks for the article. But this article as well as others I have seen on the web - miss out one critical thing - where do I add these directives? You mention that add this directive - Strict-Transport-Security: max-age=60 Ya, but where? I am using Ubuntu 16.04 with Apache, MySQL and PHP.