What does the 'Strict-Transport-Security' (HSTS) security header instruct a web browser to enforce for a specific domain?
A. To route incoming text emails through unencrypted FTP pathways
B. To force the browser to only connect to that website using secure HTTPS connections, preventing accidental or forced unencrypted HTTP fallbacks
C. To wipe localized browser history data logs automatically
D. To double the physical transmission speed of local routers
Answer: Option B
Solution (By JKSSB Mock Tests)
HSTS protects websites against protocol downgrade attacks and cookie hijacking by forcing browsers to automatically upgrade all connection attempts to secure HTTPS.
No comments yet. Be the first to start the discussion!