Strict-Transport-Security Header Explained
What the HTTP Strict-Transport-Security header does and when it's used.
Published October 16, 2026
The Strict-Transport-Security header tells the browser to only ever connect to this domain over HTTPS for a specified duration.
Key points
- Also known as HSTS — helps prevent protocol downgrade attacks