Skip to content

HTTP Strict Transport Security

What is HTTP Strict Transport Security?

A web security policy mechanism that forces browsers to interact with websites only over HTTPS connections, preventing protocol downgrade attacks.

Information Security

Frameworks that govern http strict transport security

ISO 27001:2022View framework →NIST Cybersecurity Framework 2.0View framework →CIS Controls v8View framework →

What the standards actually require on http strict transport security

Requirements naming http strict transport security across this standard, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications1 control

Security Layer 3 Applications per X.805 Clause 7.3: The Applications Security Layer addresses requirements of network-based applications accessed by service provider customers.

X805-Layer3-Applications-Security-Email-Web-Directory-File-Transfer-E-Commerce-Video · ITU-T X.805 Security Layer 3 - Applications Security + Email + Web + Directory + File Transfer + E-Commerce + Video Conferencing + IM + Office Collaboration + SaaS + B2B EDI + Mobile Apps + APIs →

Questions people ask about http strict transport security

What is HTTP Strict Transport Security?
A web security policy mechanism that forces browsers to interact with websites only over HTTPS connections, preventing protocol downgrade attacks.
Why is HTTP Strict Transport Security important for compliance?
HTTP Strict Transport Security is a key concept in Information Security. Understanding http strict transport security helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 686 frameworks with 311K cross-framework control mappings.
Which compliance frameworks address HTTP Strict Transport Security?
HTTP Strict Transport Security appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications. Across these standards we have identified 1 control that names it directly, each linked to the control text on the compliance platform.
Where can I learn more about HTTP Strict Transport Security?
Explore our compliance framework pages to see how http strict transport security applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 686 frameworks.

See how HTTP Strict Transport Security applies across compliance frameworks

Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.