Tag: HSTS

  • HSTS: Forcing HTTPS for your service

    HSTS: Forcing HTTPS for your service

    You may have a hard time finding a non-HTTPS site today, but it was not too long ago when the default was HTTP. Sites like Facebook and Google were available without HTTPS/SSL for anyone in the network path to sniff and inject traffic into (even steal passwords and cookies). ISPs in particular loved to know…