HTTP Strict Transport Security (HSTS) and HSTS Preload Explained

Описание: Attackers are constantly looking to exploit insecure HTTP connections, so HSTS steps in to keep users safe even when they do not type in HTTPS:// before a domain. HSTS makes SSL stripping much more difficult as it relies on HTTP requests.