cid e796668bf8f1ea269a16a417e3c1f8232c471898f73749e2355d9ed0d7fd5baf · original · open access · via wikipedia
Title: HTTP Strict Transport Security Authors: Venue: Wikipedia Year: unknown Canonical: wiki:http-strict-transport-security URL: https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security Collector: wikipedia OA: true ABSTRACT HTTP Strict Transport Security (HSTS) is a policy mechanism that helps to protect websites against man-in-the-middle attacks such as protocol downgrade attacks and cookie hijacking. It allows web servers to declare that web browsers should automatically interact with it using only HTTPS connections, which provide Transport Layer Security (TLS/SSL), unlike the insecure HTTP used alone. HSTS is an IETF standards track protocol and is specified in RFC 6797.