How To Fix the “HSTS Missing From HTTPS Server” Error (in 5 Steps)

Описание

Any site that redirects from HTTP to HTTPS is vulnerable to this exploit... which means it's wise to take a proactive approach and fix this flaw. ?
? Subscribe: https://www.youtube.com/c/Kinsta?sub_confirmation=1

It’s widely accepted that HTTPS is far more secure than HTTP. However, if you’re encountering the “HSTS missing from HTTPS server” message, then this protocol could be putting your site at risk.

Fortunately, it is possible to close this serious security loophole. Even if you haven’t encountered this error message, any site that redirects from HTTP to HTTPS is vulnerable to this exploit. Therefore, it’s still wise to take a proactive approach and fix this flaw.

In this video, we’ll explore what the “HSTS missing from HTTP server” error is and why it’s such a huge concern for any website that uses HTTPS redirects. We’ll then show you how to fix this problem and foil the hackers, in five easy steps.

ℹ️ About Kinsta

Kinsta is an award-winning Cloud Platform designed to host and manage your WordPress sites, Applications, and Databases faster and more efficiently. Trusted by 25,000+ companies worldwide, from developers, startups, and agencies, to multinational brands, we guarantee lighting-fast performance, enterprise-level security, ease of use, and exceptional support.

? Try our flagship Managed WordPress Hosting plans and get $240/month worth of premium features included in every plan. That’s free unlimited migrations, 20% faster load times thanks to Google's fastest servers and Premium Tier network backed by Cloudflare's 275+ CDN locations worldwide, and 24/7/365 multilingual technical support from humans in less than 2 minutes.

? Try risk-free with our 30-day money-back guarantee Powerful Managed WordPress Hosting

?Follow us:
► https://kinsta.com/blog/
► https://kinsta.com/newsletter/
► https://twitter.com/kinsta
► https://instagram.com/kinstahosting
► https://facebook.com/kinstahosting

?Discover all of our hosting solutions ► https://kinsta.com/

__________________________

?Timestamps

0:00 Intro
1:00 The HSTS Protocol (and Why You May Want to Use It)
2:29 How To Fix the “HSTS Missing From HTTP Server” Error
2:47 Create a Manual Backup
3:28 Set Up an HTTP to HTTPS Redirect
4:45 Add the HSTS Header
5:28 Submit Your Site To the HSTS Preload List
6:44 Verify Your Strict-Transport-Security Header

__________________________

? Resources

? How To Fix the “HSTS Missing From HTTP Server” Error
► https://kinsta.com/knowledgebase/hsts-missing-from-https-server/

? Redirect all of your HTTP traffic to HTTPS - Nginx Server
► https://www.cloudbooklet.com/nginx-redirect-urls-http-to-https/



#HSTS