📚 more context for HTTPS-only docs

mars · web-flow · commit 00004bfaf93b · 2016-10-20T13:19:46.000-07:00
diff --git a/README.md b/README.md
@@ -126,15 +126,15 @@ Create a `static.json` file to configure the web server for clean [`browserHisto
 
 #### HTTPS-only
 
-Enforce secure connections by automatically redirecting insecure requests to `https://`:
+Enforce secure connections by automatically redirecting insecure requests to **https://**, in `static.json`:
 
 ```json
 {
   "https_only": true
 }
 ```
 
-Prevent downgrade attacks by adding an HSTS header, [HTTP strict transport security](https://developer.mozilla.org/en-US/docs/Web/Security/HTTP_strict_transport_security):
+Prevent downgrade attacks with [HTTP strict transport security](https://developer.mozilla.org/en-US/docs/Web/Security/HTTP_strict_transport_security). Add HSTS `"headers"` to `static.json`:
 
 ```json
 {

Original file line number	Diff line number	Diff line change
@@ -126,15 +126,15 @@ Create a `static.json` file to configure the web server for clean [`browserHisto
`126`	`126`
`127`	`127`	`#### HTTPS-only`
`128`	`128`
`129`		-Enforce secure connections by automatically redirecting insecure requests to `https://`:
	`129`	+Enforce secure connections by automatically redirecting insecure requests to https://, in `static.json`:
`130`	`130`
`131`	`131`	```json
`132`	`132`	`{`
`133`	`133`	`"https_only": true`
`134`	`134`	`}`
`135`	`135`	```
`136`	`136`
`137`		`-Prevent downgrade attacks by adding an HSTS header, [HTTP strict transport security](https://developer.mozilla.org/en-US/docs/Web/Security/HTTP_strict_transport_security):`
	`137`	+Prevent downgrade attacks with [HTTP strict transport security](https://developer.mozilla.org/en-US/docs/Web/Security/HTTP_strict_transport_security). Add HSTS `"headers"` to `static.json`:
`138`	`138`
`139`	`139`	```json
`140`	`140`	`{`