For any site you visit nowadays, HTTPS should be offered by default. I don't care about the content of the site -- there is no reason to go HTTP only in 2016. Security matters, folks. Google.com -- ...

Google recently announced that it plans to enforce HTTP Strict Transport Security for many of its top-level domains. What are the security benefits of HTTP Strict Transport Security? Are there any ...

Even though it was designed to improve security, some infosec experts have recently warned against preloading the HTTP Strict Transport Security protocol. What are the risks that come with preloaded ...

The US Department of Defense plans to implement HTTPS and HSTS (HTTP Strict Transport Security) for all its public-facing websites by the end of the year. Issues about DOD websites using insecure HTTP ...

As the launch of Windows 10 draws ever-nearer, we're hearing more about Microsoft Edge and less about Internet Explorer. Edge (formerly known as Project Spartan) may be the default browser in the ...

Use URL clues, technology checkers, source code, GitHub repositories, and company job postings to investigate how a website was built. Follow this practical walkthrough to download SQLite3, configure ...

Facebook has upgraded its link security infrastructure to include HSTS preloading, which automatically switches HTTP links to HTTPS for eligible websites. The change is intended to improve security ...

Google's John Mueller said this morning on Reddit that even if you have HSTS (HTTP Strict Transport Security) which kind of by default forces a domain to go from HTTP to HTTPS, that you should still ...

Windows updates released this month are causing some GOV.UK sites to become unreachable due to the GOV.UK TLD being added to Microsoft's HSTS preload list. This causes Microsoft Edge and Internet ...