HTTP Strict Transport Security

The Strict-Transport-Security HTTP response header informs browsers that the site should only be accessed using HTTPS, and that any future attempts to access it using HTTP should automatically be converted to HTTPS. Also known as HSTS.

Baseline Status: Achieved Widely Available on Jan 29, 2018 (Cross-browser Newly Available since Jul 29, 2015).

Desktop Browser Engine Support

Google Chrome

4

Supported

Mozilla Firefox

4

Supported

Apple Safari

7

Supported

Microsoft Edge

12

Supported

Mobile Browser Engine Support

Chrome Android

18

Firefox Android

4

Safari iOS

7

Specifications and References

Specification ↗ Feature XML ↗

MDN Browser Compat Data Keys:

http.headers.Strict-Transport-Security ↗