DEV Community

Discussion on: MITM (Man-In-The-Middle) Attacks and Prevention

Collapse
 
srikanth597 profile image
srikanth597

Ok
But how does the preloaded HSTS happen BTW?.
Is it that as a developer they should configure in JavaScript.
Or does it happen through a end user browser?

Collapse
 
appsecmonkey profile image
Teo Selenius

Hey!

HSTS is facilitated via the Strict-Transport-Security HTTP response header, and preloading is done at hstspreload.org. You can read more here: appsecmonkey.com/blog/hsts