HSTS

HTTP Strict Transport Security — header som tvinger HTTPS:

Strict-Transport-Security: max-age=31536000; includeSubDomains