Website Security & Threat Management
Enforce Web Policy with HTTP Strict Transport Security (HSTS)

Enforce Web Policy with HTTP Strict Transport Security (HSTS)

2/26/2015 · Ryan Lackey

What this post added

Introduced HTTP Strict Transport Security (HSTS) as a feature within Cloudflare's dashboard. This enables users to enforce HTTPS connections by sending HSTS headers to browsers. The post details the parameters of HSTS (max-age, includeSubDomains) and explains its role in preventing SSL stripping attacks. It also guides users on how to enable HSTS through the new beta dashboard.

Read the original post ↗