What is HSTS?
HSTS is an international Internet engineering organization IETF is promoting a new web security protocol. After a website adopts HSTS, users do not need to manually enter HTTPS in the address bar when visiting, and the browser will automatically use HTTPS to access the website address, thus ensuring that users always access the encrypted link of the website and protect the security of data transmission.
What are the functions of turning on HSTS?
- Prevent man-in-the-middle attacks on SSLStrip, effectively avoiding man-in-the-middle hijacking of port 80.
- If an error occurs with the certificate, the error is displayed and the user cannot avoid the warning.
- Save a 302/301 jump request for the browser, which greatly improves the security factor and user experience.
- Save HTTPS communication RT and force HTTPS (if the user accesses using HTTP, the client side will automatically perform an internal jump and be able to see the response code of the 307 Redirect Internel.).
Do you need to open it?
If it is an HTTPS site, it is recommended to open it
How to configure a CDN
This option is not enabled by default in the Speed Shield system CDN, because not all sites need HTTPS access, so it needs to be enabled manually. As shown in the figure:
