HSTS - Http strict transport security a good idea?

[AdminAdmin is verified member.]

Hi Guys

Anyone familiar with HSTS. Is it a good idea to implement it instead of leaving it to a 301 redirect? Any downsides? (Obviously assuming your site is on https).

Cheers,
S

 

[davedevelopment]

I think it's worth it, I can't imagine ever going back to serve anything over plain text HTTP, so may as well implement it.

Some good information on these types of things at securityheaders.com, here is AD's report: https://securityheaders.com/?q=https://www.acorndomains.co.uk&followRedirects=on

 

[ian]

I'd like to see http, https and www all phased out of existence!