This Internet-Draft is no longer active. Unofficial copies of old Internet-Drafts can be found here:
http://tools.ietf.org/id/draft-ietf-websec-strict-transport-sec.
Abstract:
This specification defines a mechanism enabling web sites to declare themselves
accessible only via secure connections and/or for users to be able to direct their user
agent(s) to interact with given sites only over secure connections. This overall policy
is referred to as HTTP Strict Transport Security (HSTS). The policy is declared by
web sites via the Strict-Transport-Security HTTP response header field and/or by other means, such
as user agent configuration, for example. [STANDARDS-TRACK]
Authors:
Jeff Hodges <Jeff.Hodges@PayPal.com>
Collin Jackson <collin.jackson@sv.cmu.edu>
Adam Barth <ietf@adambarth.com>
(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid)
datatracker.ietf.org