Force-TLS for Linux 3.0.0

ForceTLS is an adaptation of the ForceHTTPS protocol by Collin Jackson and Adam Barth, which supports a simple HTTP header in forcing automatic connections to HTTPS connections in the future. This helps prevent cookie theft and other man-in-the-middle attacks when you're using an insecure network. Here's how it works:<br /><br /> 1. A site x.com served via HTTPS provides a header X-Force-TLS in its response. The header contains a max-age value (how long to remember the forced TLS) and optionally an includeSubDomains flag.<br /> 2. The browser recieves this header and adds it to a Force TLS database.<br /> 3. In the future, any requests to x.com are modified to be via HTTPS if they are attempted through HTTP before the request hits the network.<br /> 4. If any subdomains *.x.com are requested via HTTP and the includeSubDomains flag was set, they are also forced to be HTTPS.

Requirements:	No special requirements
Platforms:	*nix, Linux
Keyword:	Attempted,  Browser,  Forced,  Here039s,  Includesubdomains,  Maxage,  Optionally,  Remember,  Request,  Requested,  Response,  Served,  Subdomains,  Works,  Xforcetls
Users rating:	0/10