Security headers, CSP and HSTS, explained.
A few years back, security educator Tanya Janca registered a .dev domain, pointed it at a simple registrar forwarding rule, and got HTTPS errors in front of a live audience the first time she...
Read moreYou're probably here because a header checker flagged something called HSTS on your site, or you spotted the term while reading about HTTPS and it wasn't clear whether the two were the same thing....
Read moreEach header with the value to send, the trade-off it carries, and the order to roll them out without breaking the site.
Read more
