Google.com Begins HTTP Strict Transport Security Migration (HSTS)

Aug 1, 2016 - 8:08 am 2 by
Filed Under Google

Green Tech Google 1900px

Google announced Friday they are going HSTS, HTTP Strict Transport Security, for Google.com. That means anyone who tries to go to HTTP will be forced to go to HTTPS, even more than just a 301 redirect.

HSTS prevents people from accidentally navigating to HTTP URLs by automatically converting insecure HTTP URLs into secure HTTPS URLs. Users might navigate to these HTTP URLs by manually typing a protocol-less or HTTP URL in the address bar, or by following HTTP links from other websites, Google said.

Google said they "turned on HSTS for www.google.com, but some work remains on our deployment checklist." I did check, I didn't see HSTS on for them yet but maybe they are rolling it out slowly.

A good way to check is to use SSL Labs test and it would say "HTTP Strict Transport Security (HSTS) with long duration deployed on this server." Here is a screen shot of this site:

click for full size

Of course, do not implement HSTS without HTTPS on your site, that is asking for it. Also, there may be some redirect confusion from GoogleBot tools with that, but do not worry.

Good luck Google going HSTS!

Forum discussion at Google+.

 

Popular Categories

The Pulse of the search community

Follow

Search Video Recaps

 
Google Spam Update, Volatility & Indexing Bug, AI Overviews, Google Maps Exploit, Ads, Applebot - YouTube
Video Details More Videos Subscribe to Videos

Most Recent Articles

Search Forum Recap

Daily Search Forum Recap: June 24, 2024

Jun 24, 2024 - 10:00 am
Google Ads

Google Ads To Bring Automatically Created Assets To Ad Level?

Jun 24, 2024 - 7:51 am
Google

Google Perspectives Can Show Instagram Posts

Jun 24, 2024 - 7:41 am
Google Search Engine Optimization

Google Structured Data Carousel Guidance On How To Markup Multiple Items On Category Pages

Jun 24, 2024 - 7:31 am
Google Maps

Google Using AI Overviews On Business Profiles Local Listings

Jun 24, 2024 - 7:21 am
Google Search Engine Optimization

Google: When You Should Fix Pages 404 Status Codes

Jun 24, 2024 - 7:11 am
Previous Story: Yahoo Search Tests New User Interface