We ran a PCI scan and the store got the following failure, and would like help to input the correct response as Shopify is PCI compliant.
Web (2053/tcp) HSTS Missing From HTTPS Server (RFC 6797)
Synopsis The remote web server is not enforcing HSTS, as defined by RFC 6797.
Description The remote web server is not enforcing HSTS, as defined by RFC 6797. HSTS is an optional response header that can be configured on the server to instruct the browser to only communicate via HTTPS. The lack of HSTS allows downgrade attacks, SSL-stripping man-in-the-middle attacks, and weakens cookie-hijacking protections.
Output The remote HTTPS server does not send the HTTP "Strict-Transport-Security" header.