HSTS

HSTS, or HTTP Strict Transport Security, is a response header that tells browsers to only ever connect to a site over HTTPS. Once set, the browser refuses plain HTTP for that domain, closing the gap where an initial insecure request could be intercepted.