December 2017
Intermediate to advanced
410 pages
11h 5m
English
HTTPS is an important aspect to take care if we want to have a secure communication between a client and a server.
Whenever a user just enters the domain name in a browser (for example, zealvora.com), the request goes as an HTTP request to the server. Most websites will immediately send a 301 redirect to https://, but an attacker can intercept the first HTTP request and then control the entire session moving further.
When HSTS is implemented, the server will instruct the browser that the domain can only be accessed via HTTPS. So, in this case, even if a user enters http://domain.com, the browser will upgrade the connection to https://domain.com.
Read now
Unlock full access