HSTS

Definitions

1. HTTP Strict Transport Security — a response header that tells browsers to only access the site over HTTPS for a specified duration. Prevents protocol downgrade attacks and cookie hijacking by ensuring all future requests use TLS, even if the user types http://.

   In plain English: A header that tells browsers to always use the secure HTTPS version of your site, never the unencrypted HTTP version.

   Example: "Set HSTS with max-age=31536000 and includeSubdomains — after the first visit, the browser will never make an insecure request."

Related Terms

• CORS
• CSP
• HSTS
• CORS Preflight
• Content Security Policy
• Security Headers
• Clickjacking
• HTTP Strict Transport Security