Research any topic before you write.

Find related topics. | Discover entities. | See connections. | Build a topical map.

HTTP Strict Transport Security

HTTP Strict Transport Security (HSTS) is a policy mechanism that helps to protect websites against man-in-the-middle attacks such as protocol downgrade attacks and cookie hijacking. It allows web servers to declare that web browsers (or other complying user agents) should automatically interact with it using only HTTPS connections, which provide…

History, Browser support & Specification history

Use the mouse wheel or two fingers (on touchscreens) to zoom in and out of the map.

Research this topic

Explore the main themes, entities and connections around HTTP Strict Transport Security. Start with the topic map, then use the sections below for research and deeper semantic analysis.

Explore this topic

Start with a few of the strongest sections from the source topic. These are research directions, not a list of keywords you must use.

Browser support

ChromiumMozillaOperaSafariOS X Mavericks
10 related topics

Specification history

IESGRFCInternet DraftPayPal
4 related topics

Limitations

URIInsecure channelDNSDNSSECLast mile
9 related topics

Applicability

Moxie MarlinspikeMozilla FirefoxInternet ExplorerMicrosoft EdgeLimitations
7 related topics

Topics to explore

Browse the full topic structure. Each item opens a new analysis centered on that subject.

Overview

Specification history

HSTS mechanism overview

Applicability

Limitations

Browser support

Advanced semantic analysis

Deeper signals for content research, entity SEO and topical coverage. The plain-language headings explain what each technical view is useful for.

Map overview Semantic statistics

HTTP Strict Transport Security

Nodes54
Edges53
Triples26
Avg. degree1.96
Density0.037037
Components1

How this topic connects Entity context

See the strongest relationship patterns around the current topic before diving into the raw triples.

HTTP Strict Transport Security

Top relations

related to history · 17
HTTP Strict Transport Security → December, HSTS, HTTP, IESG, Internet Draft, June, November, October, Proposed Standard RFC, RFC, Strict Transport Security, Strict-Transport-Security, STS, The, The HSTS, The HTTP, With

Important terminology Word statistics

Use these terms to understand the vocabulary surrounding the topic, not as a checklist for keyword stuffing.

Important terminology

hsts http user attacks policy https web tls list browser specification security server header request internet websites man-in-the-middle using site

Entity relationships Subject–Predicate–Object triples

SubjectPredicateObjectConfidenceSrc
protocol downgrade attacksinstance ofis a policy mechanism that helps to protect websites against man-in-the-middle attacks0.80text
cookie hijackinginstance ofis a policy mechanism that helps to protect websites against man-in-the-middle attacks0.80text
Firesheep.Because HSTS is time limitedinstance ofbelow.HSTS can also help to prevent having one's cookie-based website login credentials stolen by widely available tools0.80text
it is sensitive to attacks involving shifting the victim's computer time e.g. using false NTP packetsinstance ofbelow.HSTS can also help to prevent having one's cookie-based website login credentials stolen by widely available tools0.80text
plain HTTP or if the URI for the initial request was obtained over an insecure channelinstance ofLimitationsThe initial request remains unprotected from active attacks if it uses an insecure protocol0.80text
www.example.org instead of www.example.com.Even with an HSTS preloaded listinstance ofor simply a domain name that misleadingly resembles the real domain name0.80text
HSTS cannot prevent advanced attacks against TLS itselfinstance ofor simply a domain name that misleadingly resembles the real domain name0.80text
such as the BEAST or CRIME attacks introduced by Juliano Rizzoinstance ofor simply a domain name that misleadingly resembles the real domain name0.80text
Thai Duonginstance ofor simply a domain name that misleadingly resembles the real domain name0.80text
HTTP Strict Transport Securityrelated to historyThe HSTS0.60section
HTTP Strict Transport Securityrelated to historyRFC0.60section
HTTP Strict Transport Securityrelated to historyNovember0.60section

Related concept clusters Concept neighborhoods

These clusters group vocabulary that occurs around closely connected concepts in the source material.

    Connections between topic areas Semantic bridges

    Bridges can reveal useful research angles that are easy to miss in a flat list of related terms.

    Min side: 3
    For writers, content strategists, SEOs, marketers and creators — from quick topic research to advanced semantic analysis.