ConceptsHSTS

HSTS

HTTP Strict Transport Security: a web security header that tells browsers to only connect to a site over HTTPS, preventing downgrade to insecure HTTP and protecting against certain interception and stripping attacks.

Glossary definition

6 direct links1 lesson

Concept Neighborhood

Prerequisite · arrow shows the orderRelated · bigger circles cover more lessons

Start here

HTTPS

The foundation HSTS builds on, worth understanding first.

Open concept →

Prerequisitelearn this first

HTTPSStart here

HTTPS is HTTP protected with TLS so web traffic is encrypted and the server can prove its identity.

lessons

Relatedsorted by lesson coverage

HTTP

lessons

Browser Warnings

lesson

Certificate Pinning

lesson

Mixed Content

lesson

Referrer-Policy

lesson

Related Lessons

1 lesson covers this concept

HTTPS and TLS in the Browser

General Beginner