A mechanism that instructs a browser to always connect over HTTPS.
Short for HTTP Strict Transport Security. It forces subsequent visits to a site you've accessed once to always use HTTPS. Since the very first visit could still slip through over plain HTTP, browser vendors also maintain an HSTS preload list, pre-registering major sites' domains to close that gap.
© 2026 ITBGM