How to check if a web page supports or uses HSTS (http strict transport security)

0
78
How to check if a web page supports or uses HSTS (http strict transport security)

Among those who move in the world of the Internet and the creation of websites, knowing how to check if a Web page supports or uses HSTS (http strict transport security) is often useful.

These security policies are present in many recognized web pages, but if you have doubts about it, it is best to first know what HSTS is about.

What is HSTS?

While on home connections we have WEP, WPA, WPA2 and WPA3 WiFi security, on websites there is HSTS. HSTS refers to a policy specifically designed for website security. The principle of this is to create a defensive barrier for the purpose of preventing fraudulent attacks. The goal is to make communications, cookies and other factors impenetrable.

The operation of HSTS is somewhat complicated, however, in short, when the security of the connection is compromised, an error message appears. This error message makes it impossible to access the website.

hsts websites

Undoubtedly, this system has proven to be efficient in avoiding some attacks that were common in the past, such as those that seek to track a computer through its IP address and that greatly compromised user security. Given this, a website with HSTS security has a defensive barrier that others do not have.

However, how do we know if a website supports HSTS? The truth is that there are several ways to check if a website supports HSTS. In this case, it is best to use certain platforms or web applications that will work for the purpose.

Check if the web page supports HSTS with hstspreload

Possibly the easiest way to check if a web page supports the HSTS protocol is to use the hstspreload website. This site has a very simple operation, in fact, we only have to provide the website that we need to verify. In any case, if you have doubts (understanding that the web page is in English). Please read the following information carefully.

  • Simply go to the hstspreload website, once here you will see a space for text (just below “Enter a domain”). In this space write the website you want to check.
  • After having correctly entered said website, simply click on the “Check HSTS preload status and eligibility” button. Doing the above will display the result.
  • If Status: “your website” is currently preloaded appears, it means that it has HSTS. On the other hand, if the result Status: “your website” is not preloaded is displayed, it means that the page does not support HSTS.

check if site has hsts

In addition to the above, seeing the SSL certificate in the Google Chrome browser helps to check the operation of other protocols, something that is recommended to know if you have doubts about a website.

What is the use of checking that a website supports HSTS?

Not all websites support HSTS, for this reason the question arises as to what is the purpose of HSTS. As we pointed out before, HSTS refers to a security policy, through which it seeks to protect users from cyber attacks.

Given this, the main reason why it is relevant for a website to support HSTS is because, in general terms, it is safer for users. In any case, there is no need to be alarmed in the event that a website does not have this feature.

In fact, mainly large websites, such as Facebook, are the ones that have this protocol. Pages of lesser scope usually do not have HSTS and therefore do not mean that they are dangerous places.

Previous articleHow to fix ‘CRITICAL_PROCESS_DIED’ error when installing or starting on Windows 10, 8 and 7
Next articleWhere and how can I buy World of Warcraft? How much does it cost or what is the price of WoW?

LEAVE A REPLY

Please enter your comment!
Please enter your name here