l1-no-hsts

This response is served without the Strict-Transport-Security header. Every other route on this site includes it. The check inspects response headers and flags the absence.