The following line needs to be added to the [ResponseHeaders] section of the \MDaemon\WorldClient\WorldClient.ini and \MDaemon\WebAdmin\WebAdmin.ini files:
Strict-Transport-Security=max-age=31536000
The Webmail and Remote Administration servers must then be restarted via Setup -> Web + IM Services (alternatively restart MDaemon to apply the change).
