Strict-Transport-Security

Hello,

A very nice way to force HTTPS on all the pages of your site is adding the following header to the server responses on your site:
Strict-Transport-Security=max-age=31536000;

So after that if some user access some page of your site as HTTPS, it will stay as HTTPS on all the site, even if they type just “HTTP”.

http://lists.w3.org/Archives/Public/www-archive/2009Sep/att-0051/draft-hodges-strict-transport-sec-05.plain.html

The only (little) problem is that this is not yet implemented on any browser (without the need of additional plugins)…

AC.

This entry was posted in Learned Today, Medium Technical and tagged , , , , , . Bookmark the permalink.

Comments are closed.