Thursday, February 26, 2015

HSTS support for Internet Explorer

Last Tuesday, Microsoft provides a new security feature with HSTS for its web browser Internet Explorer. HSTS stands for HTTP Strict Transport Security that provides secure browsing over the internet. HSTS aids users to protect from MitM attacks that can remove TLS out of communications with a server. According to Microsoft, it works with the IE running on Windows 10 platform. There are two methods used by HSTS for securing connections. One way allows that websites can register to be hard-coded by IE and other browsers to redirect HTTP traffic to HTTPS while the other way, sites not on the preloaded list can enable HSTS via the Strict-Transport-Security HTTP header. <more>

No comments: