HSTS (HTTP Strict Transport Security)

 HSTS

HSTS (HTTP Strict Transport Security)

·         Configured on the server

·         Only allows the session to be HTTPS

·         Mitigates SSL stripping, downgrade attacks

·         Also called HTTP security header