How Do Enable HSTS For Website?

If you are running a website, which contains sensitive data or important information, it is advisable to implement HSTS. In case you are running a site that doesn’t contain any personal data, you may not be able to utilize the full benefits of HSTS.

Advantages of HSTS

HSTS features are designed to focus on preventing the ‘middle man attack’. These kinds of attacks are done to steal sensitive information and credentials of the website. Forcing every communication to be sent via HTTPS prevents these attacks. This is done by instructing the web browser to not to send any kind of traffic over the HTTP protocol.

Two main security advantages of HSTS are:

1)    Automatically redirects any assets that are referenced in HTML generated by your website to be called through https:// instead of http://. This will ensure that the source from which the content is coming is a valid SSL certificate.
2)    The browser will automatically eliminate the ability to override the certificate warning in case the website uses an invalid SSL certificate. It also prevents access to such websites.



 How do I implement HSTS?

SSL (Secure Socket Layer) certificates are widely used to enhance website security. There are different types of SSL certificates available in the market. It depends upon the requirement of the individual that which SSL certificate he should opt. For example:

•    If you contain sub-domains in your websites content structure, Wild card certificate is what you need to only cover https://.
•    In case only the main domain needs protection, the Domain validation SSL certificate will do the job.

To implement HSTS, follow the following steps:

1)    Check the validity of the SSL certificate of your website
2)    Redirect all the http:// links to https://
3)    Cover all the sub-domains with wildcard SSL certificate
4)    HSTS header should be served on the base domain for https:// request and set Max-age to at least 18 weeks
5)    Specify preload directives and ‘include subdomains’ directives

Failing to fulfill these requirements (1-5) will result in the removal of your listing.

Comments

Post a Comment

Popular posts from this blog

Does SSL Help Your Local Business’s SEO Rank To Improve On Google?

Image
About SSL SSL  is a Secure Socket Layer, which helps in securing data from being misused or modified by any third party by establishing encrypted link between the browser and the server or between servers. This link ensures that the data that is being transferred/shared between the server and the browser remains private and secure. How SEO Rank can be improved for our website/local business? We should comprehend this simplerly. At whatever point we have an inquiry in our mind, we tend to seek it online with the assistance of any search engine. When we compose our question, a list of results appear on our screen and out of each one of those outcomes more often than not we pick the specific first outcome. We do so because the main site appeared because of our query tends to be more proper or important than different sites or site pages. The site positioned better will be appeared preceding the sites whose positioning isn't that great when contrasted with the site which is positi...
Read more

Comodo Premium SSL Wildcard Certificate In Affordable Price

Image
Premium SSL certificates enhanced form of the quality  SSL certificates  employed by eCommerce websites to secure on-line transactions. Premium SSLs provide solely many blessings over normal SSLs, the foremost notable being the next assurance for users buying things for your web site and extra validation, which can facilitate build trust together with your site's users. Provide A Secure E-Commerce Environment to All Sub-Domains Save time and cash by consolidating your SSL Certificate management. If you've got one ranking domain and multiple sub-domain, you'll be able to use one SSL Certificate to secure all of them. Comodo's Premium SSL Wildcard Certificate is simple to manage whereas providing future-proof 2048 bit root keys. A premium SSL certificate isn't structurally completely different from other certificates. however enhanced form  selected Certificate Authority’s (CA) policy symbol so the company’s official company name is featured within the ...
Read more

What Studies Say About Comodo Positive SSL Wildcard and Essential SSL Wildcard Certificate?

Image
Every business has its own nature, some runs high-risk and some have a low-risk business. But the data which is there in hand is something very important for which a company’s owner works really hard enough to build a huge empire. What if?   What if the data got stolen? This is where the business suffers from an awful condition that takes a company month’s back. For that, every company needs security who keeps an eye on the thief’s who actually steals the encrypted data.  SSL Certificates  actually helps you to find out the threat and work as a shield to secure against that.      SSL Certificate SSL Certificate link ensures that all data passed between the web server and browsers remain private and integral. There are types of SSL Certificates Comodo Positive SSL Wildcard and Essential SSL Wildcard Certificate. Comodo Positive SSL Wildcard Certificate :  It’s a Certification Authority (C.A), which provides a list of SSL ce...
Read more