HTTP Strict Transport Security (HSTS) 是一种安全功能，强制浏览器仅通过HTTPS与服务器通信，防止中间人攻击和SSL剥离。本文介绍了HSTS的工作原理、启用原因、潜在不足及测试案例，强调了它在提升网络安全中的作用。
HTTP Strict Transport Security (通常简称为HSTS) 是一个安全功能，它告诉浏览器只能通过HTTPS访问当前资源, 禁止HTTP方式。
0×01. Freebuf百科：什么是Strict-Transport-Security
我摘自owasp上的一段定义：
HTTP Strict Transport Security (HSTS) is an opt-in security enhancement that is specified by a web application through the use of a special response header. Once a supported browser receives this header that browser will prevent any communications from being sent over HTTP to the specified domain and will instead send all communications over HTTPS. It also prevents HTTPS click through prompts on browsers.
The specifica
订阅专栏 解锁全文
1151
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
