Browser & Web Performance · Senior · Question 67 of 75
What is the purpose of HSTS preloading?
- ✓Correct answer: The domain is built into browsers as HTTPS-only, protecting even the very first visit from downgrade attacks
- 2It makes the CDN cache the homepage
- 3It preloads the site's TLS certificate for faster handshakes
Explanation
It requires includeSubDomains and a long max-age, and removal is slow, so all subdomains must support HTTPS first.