HSTS
HSTS (HTTP Strict Transport Security) is a response header instructing a browser to use HTTPS for a domain for a stated period.
Why it matters
It removes the plain-http first request of every session, which is the request an attacker on the network path can intercept. HSTS does not change rankings directly: HTTPS is the ranking input, and HSTS removes the interceptable first request plus the http-to-https redirect hop on repeat visits.
How it is measured
Fetch the site headers and read Strict-Transport-Security.
Checks that involve hsts
Related terms
Questions
What is hsts?
HSTS (HTTP Strict Transport Security) is a response header instructing a browser to use HTTPS for a domain for a stated period.
Why does hsts matter?
It removes the plain-http first request of every session, which is the request an attacker on the network path can intercept. HSTS does not change rankings directly: HTTPS is the ranking input, and HSTS removes the interceptable first request plus the http-to-https redirect hop on repeat visits.
How is hsts measured?
Fetch the site headers and read Strict-Transport-Security.