Strict Transport Security vs. HTTPS Resource Records: the showdown
Guest Post: HTTPS RRs and STS look similar but there are subtle differences in the threat models and deployment tradeoffs of each.
| CARVIEW |
Select Language
HTTP/2 200
date: Sun, 13 Jul 2025 22:37:33 GMT
content-type: text/html; charset=UTF-8
content-length: 36883
x-xss-protection: 1; mode=block
referrer-policy: no-referrer, same-origin, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.apnic.net
cf-edge-cache: cache,platform=wordpress
link: ; rel="alternate"; title="JSON"; type="application/json"
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 1870
strict-transport-security: max-age=15552000; preload
last-modified: Sun, 13 Jul 2025 22:37:33 GMT
cf-cache-status: MISS
expires: Sun, 13 Jul 2025 23:37:33 GMT
cache-control: public, max-age=3600
accept-ranges: bytes
access-control-allow-headers: cache-control, pragma, user-agent
access-control-allow-methods: GET, OPTIONS
server: cloudflare
cf-ray: 95ec43f0dc92f4df-BLR
Emily Stark, Author at APNIC Blog
Skip to content
