Which security mechanism forces a web browser to only communicate with a server using secure HTTPS connections, mitigating SSL stripping attacks?

Answer as guest — Start Free Practice Test to earn Practice PointsHow to earn pointsAsk a question+3Answer a question+1Someone answers yours+1Your Q gets upvoted+1Pioneer bonus (first 5)+5, ask questions & climb the leaderboard!

A DNS Security Extensions (DNSSEC)
B HTTP Strict Transport Security (HSTS)
C Content Security Policy (CSP)
D Server Name Indication (SNI)

Show answer and explanation

Answer: B. HTTP Strict Transport Security (HSTS)

•
• Explanation: B) HTTP Strict Transport Security (HSTS) is correct because it is a header response that commands browsers to automatically upgrade all insecure HTTP requests to HTTPS.

Answering after opening this box earns no Practice Points.

Rules for asking and answering

Which security mechanism forces a web browser to only communicate with a server using secure HTTPS connections, mitigating SSL stripping attacks?

More questions like this