HSTS

securityweb dev

Stands for: HTTP Strict Transport Security

A header that forces browsers to use HTTPS for a site.

HTTP Strict Transport Security (RFC 6797) tells a browser to only ever connect to a site over HTTPS, refusing plaintext and blocking click-through on certificate warnings. It defends against downgrade and stripping attacks.

Also known as: hsts

← All glossary entries