Kazap TechnologiesYLB ScoreYour Local Business Score

YLB Score › The checks, explained › Part III, Will a stranger trust you?

Browsers can be tricked back onto the insecure version

Even with a padlock, a browser that has visited you before could be steered back to the unprotected version of the site by somebody on the same network. One setting tells browsers never to do that.

It is one line in your web server's configuration.

Worth about 2 points of your 100 for a typical businessAbout 1 hour, by your web person

See for yourself

Type your address into securityheaders.com and look for Strict-Transport-Security.

How to fix it

  1. Have your web person or host add the setting, starting with a short duration, then a year.
The technical version, for your web person

HSTS. The Strict-Transport-Security response header. Behind a CDN this is the CDN's header, and the report says so.

What the check reads. Presence of the Strict-Transport-Security response header.

This is one of the checks in a YLB Score report. Every report is free, read by a person before it goes out, and written so that you can act on it without us. Ask for yours.