Web Standards

HSTS Preload

An extension of HSTS where domains are hardcoded into browsers' built-in HTTPS-only lists, ensuring HTTPS from the very first connection.

相关协议

HTTP

在指南中提及

API Security Checklist: OWASP Top 10 for APIs Security & Authentication

HSTS: HTTP Strict Transport Security Complete Guide Security & Authentication

Migrating from TLS 1.2 to TLS 1.3: Configuration and Compatibility Migration & Upgrades

另请参阅

TLS Handshake Security

TLS Certificate (SSL Certificate) Security

HSTS (HTTP Strict Transport Security) Security

Origin Web Standards

SSL Stripping TLS & Encryption