HSTS - MDN Web Docs Glossary: Definitions of Web-related terms 编辑

Learn more

HTTP Strict Transport Security lets a web site inform the browser that it should never load the site using HTTP and should automatically convert all attempts to access the site using HTTP to HTTPS requests instead. It consists in one HTTP header, Strict-Transport-Security, sent by the server with the resource.

In other words, it tells the browser that changing the protocol from HTTP to HTTPS in a URL  works (and is more secure) and asks the browser to do it for every request.

• Strict-Transport-Security
• OWASP Article: HTTP Strict Transport Security
• Wikipedia: HTTP Strict Transport Security