Tim Kadlec • 1/4/2016

HSTS and Let's Encrypt

This technical article explains HTTP Strict Transport Security (HSTS) and its relationship with Let's Encrypt certificates. It details the security vulnerability of HTTP-to-HTTPS redirects, how HSTS closes this gap by instructing browsers to always use HTTPS, and provides a practical example of implementing the HSTS header in a server configuration.

0 comments

#http #web security #SSL Certificates