diff --git a/share/apache2/plinth.conf b/share/apache2/plinth.conf
index 5edd6eea6..b489beb87 100644
--- a/share/apache2/plinth.conf
+++ b/share/apache2/plinth.conf
@@ -22,7 +22,7 @@
     SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key
 
     ## Use HTTP Strict Transport Security to force client to use secure connections only
-    Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
+    Header always set Strict-Transport-Security "max-age=31536000"
 
     ## Shared options.
     ProxyPreserveHost on