HTTP STRICT TRANSPORT SECURITY / HSTS
defined.

What is HTTP Strict Transport Security (HSTS)?

Without HSTS, an attacker on the network can intercept the first request to a domain and downgrade to HTTP. HSTS — especially with preload — closes that gap by hard-coding the HTTPS requirement into the browser.

Related terms.

• Content Security Policy (CSP)
• Subresource Integrity (SRI)
• Cross-Origin Resource Sharing (CORS)
• JSON Web Token (JWT)

Where this shows up.

See our web application penetration testing, API security testing, network penetration testing, and cloud security audit services for how we test for and defend against this class of issue.