Community driven content discussing all aspects of software development from DevOps to design patterns. It should always be a top priority for any developer to secure and encrypt communications across ...

Google has made accessing www.google.com a little more secure by turning on HSTS (HTTP Strict Transport Security). With HSTS, Google ensures its servers are telling browsers that all future attempts ...

Almost a year and a half after the HTTP Strict Transport Security (HSTS) mechanism was established as a standard, its adoption rate by websites remains low because developers are not aware of its ...

Welcome to a supplemental edition of our “Web Served” series, a DIY guide on tackling the challenges of setting up and running a Web server for fun. It’s been a while since we last published an ...

Over a year ago, we covered a topic that is rare, 307 redirects when it goes over HSTS, HTTP Strict Transport Security. When we migrated this site over to HTTPS, we went really strict and uses HSTS ...

Mozilla introduced a pre-loaded list of domains for Firefox that only can be connected to securely in order to help protect the privacy and security of users. To force secure connections between the ...

Google has implemented HTTP Strict Transport Security (HSTS) on the google.com domain to prevent users from navigating to its site using the insecure HTTP. HSTS allows website operators to ensure ...

US government websites are taking another major step forward to becoming more secure after it was announced that all .gov TLDs would be changed to enforce HSTS preloading. The DotGov program made the ...

I need advice on the topic of web browsers enforcing HSTS. I am a generalist sysadmin and we have a bunch of internal websites that don't have proper certificates from a CA. For example, our ...