HTTP Strict Transport Security (HSTS)

wikipedia:HTTP Strict Transport Security (HSTS) (2012) is a web security policy mechanism that helps to protect websites against protocol downgrade attacks and cookie hijacking.

Strict-Transport-Security: max-age=31536000; includeSubDomains

Related terms

• Read: https://security.googleblog.com/2017/09/broadening-hsts-to-secure-more-of-web.html
• Clickjacking
• CORS
• your connection is not private
• ingress-nginx-controller
• Content-Security-Policy (CSP)

See also

• HSTS, CORS, Clickjacking, cookie hijacking, Strict-Transport-Security:
• HTTP, HTTP client, HTTP/1.1, HTTP/2, HTTP/3, HTTPS, HSTS CSR, TLS, SSL, openSSL, WebSockets, WebRTC, ssl_certificate QUIC, HPKP, CT, List of HTTP status codes, URL redirection, Content-type:, Webhook, HTTP headers, --insecure, Axios HTTP client, HTTP cookies, HTTP ETag, Hypertext Transfer Protocol -- HTTP/1.1, HTTP security, host verification, HTTP request methods