HTTP Strict Transport Security Becomes A Standard

HTTP Strict Transport Security, or HSTS for short, is a method for ensuring that all HTTPS traffic remains HTTPS, and can not be tricked into using HTTP. Currently when a website uses HTTPS it’s vulnerable to SSLStrip type attacks, which redirect the browser to HTTP and spoof information that makes it difficult for end users to detect.

HSTS ensures that SSLStrip type attacks can not work.

Firefox and Chrome have both supported HSTS for some time, but hopefully as it’s standardized more websites will support it, ensuring that encrypted connections remain encrypted.