RFC 6797: HTTP Strict Transport Security (HSTS)

This specification defines a mechanism enabling web sites to declare themselves accessible only via secure connections and/or for users to be able to direct…

Read RFC 6797 on the RFC Editor

Outgoing relationships (25 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 2616: Hypertext Transfer Protocol -- HTTP/1.1
Normative reference — RFC 2818: HTTP Over TLS
Normative reference — RFC 5890: Internationalized Domain Names for Applications (IDNA): Definitions and Document Framework
Normative reference — RFC 3490: Internationalizing Domain Names in Applications (IDNA)
Normative reference — RFC 5891: Internationalized Domain Names in Applications (IDNA): Protocol
Normative reference — RFC 3864: Registration Procedures for Message Header Fields
Normative reference — RFC 6698: The DNS-Based Authentication of Named Entities (DANE) Transport Layer Security (TLS) Protocol: TLSA
Normative reference — RFC 5895: Mapping Characters for Internationalized Domain Names in Applications (IDNA) 2008
Informative reference — RFC 5226: Guidelines for Writing an IANA Considerations Section in RFCs
Informative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Informative reference — RFC 1035: Domain names - implementation and specification
Informative reference — RFC 4033: DNS Security Introduction and Requirements
Informative reference — RFC 5905: Network Time Protocol Version 4: Protocol and Algorithms Specification
Informative reference — RFC 4949: Internet Security Glossary, Version 2
Informative reference — RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Informative reference — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Informative reference — RFC 2560: X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP
Informative reference — RFC 4732: Internet Denial-of-Service Considerations
Informative reference — RFC 6265: HTTP State Management Mechanism
Informative reference — RFC 6454: The Web Origin Concept
Informative reference — RFC 5894: Internationalized Domain Names for Applications (IDNA): Background, Explanation, and Rationale
Informative reference — RFC 6101: The Secure Sockets Layer (SSL) Protocol Version 3.0

Incoming relationships (9 related RFCs)

Normatively referenced by — RFC 7469: Public Key Pinning Extension for HTTP
Normatively referenced by — RFC 9163: Expect-CT Extension for HTTP
Informatively referenced by — RFC 9325: Recommendations for Secure Use of Transport Layer Security (TLS) and Datagram Transport Layer Security (DTLS)
Informatively referenced by — RFC 7457: Summarizing Known Attacks on Transport Layer Security (TLS) and Datagram TLS (DTLS)
Informatively referenced by — RFC 9460: Service Binding and Parameter Specification via the DNS (SVCB and HTTPS Resource Records)
Informatively referenced by — RFC 6920: Naming Things with Hashes
Informatively referenced by — RFC 9205: Building Protocols with HTTP
Informatively referenced by — RFC 7711: PKIX over Secure HTTP (POSH)
Informatively referenced by — RFC 8280: Research into Human Rights Protocol Considerations