HSTS
HSTS is a response header instructing a browser to use HTTPS for a domain for a stated period.
Why it matters
It removes the plain-http first request of every session, which is the request an attacker on the network path can intercept.
How it is measured
Fetch the site headers and read Strict-Transport-Security.
Checks that involve hsts
Related terms
Questions
What is hsts?
HSTS is a response header instructing a browser to use HTTPS for a domain for a stated period.
Why does hsts matter?
It removes the plain-http first request of every session, which is the request an attacker on the network path can intercept.
How is hsts measured?
Fetch the site headers and read Strict-Transport-Security.