HTTP Strict Transport Security: a response header telling browsers to use HTTPS only for the site for a stated time.