The hsts tag has no wiki summary.
3
votes
1answer
201 views
Is HTST (Strict-Transport-Security header) for HTTP or HTTPS?
Is the Strict-Transport-Security header intended for HTTP or HTTPS? What I mean is, do I respond with this header on a HTTP connection which in turn tells the browser to use HTTPS only from that point ...
11
votes
4answers
316 views
How can a web application protect IE users when this browser doesn't support HSTS?
HTTP Strict Transport Security (HSTS) is a very useful feature at preventing OWASP a9 violations and attacks like SSLStrip which try and prevent the client from making a secure connection.
My ...
