Module is End of Life

Everything this module can do is available in https://www.drupal.org/project/seckit
It is recommended to use that instead of HSTS.

Overview

HSTS (HTTP Strict Transport Security) is a standard used by HTTP client applications to enforce the use of SSL communication between a site and the client. This module adds the appropriate headers to your Drupal site to trigger the HSTS on a supported client.

This module is for users who either can't change the web server configuration to include the necessary headers to enable HSTS or only want those headers for certain sites in a multi-site configuration. If you have the option to use your web server to add and manage the HSTS header data I recommend you do so. It'll save you a little extra PHP processing.

If not, then I hope this module helps you out.

For more information regarding HTTP Strict Transport Security see http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

Supporting organizations: 
Developer resources

Project information

Releases