!!! Overview[1] [{$pagename}] ([HSTS]) is a web security policy mechanism which helps to protect secure [HTTPS] websites against downgrade attacks and cookie hijacking. [{$pagename}] allows web [Websites] to declare that web [browsers] or other complying [user-agents] should only interact with it using [secure connections] ([HTTPS]), and __never__ via the insecure [HTTP] [protocol]. [{$pagename}] uses the [Strict-Transport-Security] [HTTP Response Header] !! [RFC 6797] [{$pagename}] is an IETF standards track protocol and is specified in [RFC 6797]. [{$pagename}] defines a mechanism enabling web sites to declare themselves accessible only via [secure connections] and/or for users to be able to direct their [user-agent](s) to interact with given sites only over [secure connections]. This overall [policy] is referred to as [{$pagename}] (HSTS). The [policy] is declared by [websites] via the [Strict-Transport-Security] [HTTP] [HTTP Response] [HTTP Header Field] and/or by other means, such as [user-agent] configuration, for example. !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }]