HSTS
Technology & Computing abbreviation · Cybersecurity
| Stands for | HTTP Strict Transport Security |
|---|---|
| Categories | Technology & Computing |
HSTS stands for HTTP Strict Transport Security, a cybersecurity abbreviation.
A response header that tells browsers to connect to a site only over HTTPS for a set period, automatically upgrading http links and refusing to let users click through certificate errors. It defeats SSL-stripping attacks on public Wi-Fi.
Example: Enable HSTS with a one-year max-age once every subdomain is served over HTTPS.
Usage notes
Standardized in RFC 6797 (2012). Sites can join the HSTS preload list built into major browsers so that even the very first visit uses HTTPS, and whole top-level domains such as .app and .dev are preloaded. Turning it on before all subdomains have certificates can lock users out of them.
Related abbreviations
More cybersecurity abbreviations
- EDR – Endpoint detection and response
- FIDO – Fast Identity Online
- GPG – GNU Privacy Guard
- GRC – Governance, risk and compliance
- HMAC – Hash-based message authentication code
- HSM – Hardware security module
- IAM – Identity and access management
- IDS – Intrusion detection system
- IoC – Indicator of compromise
- IPS – Intrusion prevention system
- IR – Incident response
- ISO 27001 – ISO/IEC 27001 (information security management standard)