ITPUB

Mar 29, 2016 · Information Security

Why 95% of HTTPS Sites Are Vulnerable and How a One‑Line HSTS Setting Can Secure Them

A recent Netcraft study reveals that 95% of HTTPS servers lack proper HSTS configuration, exposing users to downgrade and MITM attacks, but adding a single Strict‑Transport‑Security header can automatically enforce HTTPS and protect browsers for up to a year.