HSTS (HTTP Strict Transport Security)

An HTTP header that forces the browser to use only HTTPS when communicating with the server. HSTS protects against downgrade attacks and SSL stripping by preventing any unencrypted HTTP connection. It is recommended to include the preload directive for protection from the very first visit.