HTTP Strict Transport Security
lets a website inform the browser that it should never load the site using HTTP and should automatically convert all attempts to access the site using HTTP to HTTPS requests instead. It consists in one HTTP header,
Strict-Transport-Security
, sent by the server with the resource.
In other words, it tells the browser that changing the protocol from HTTP to HTTPS in a URL works (and is more secure) and asks the browser to do it for every request.
Strict-Transport-Security
Updated on April 20, 2024 by Datarist.