{"id":8645,"date":"2026-05-28T23:53:59","date_gmt":"2026-05-28T21:53:59","guid":{"rendered":"https:\/\/mybox.com\/help\/?post_type=manual_kb&#038;p=8645"},"modified":"2026-06-09T10:47:12","modified_gmt":"2026-06-09T08:47:12","slug":"ce-este-hsts-si-cum-asigura-securitatea-site-ului-tau-web","status":"publish","type":"manual_kb","link":"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-hsts-and-how-does-it-secure-your-website\/","title":{"rendered":"Ce este HSTS?"},"content":{"rendered":"<div class=\"translation-block translation-block-merged\">\n<p class=\"wp-block-paragraph\">HSTS (HTTP Strict Transport Security) is a web security mechanism that instructs browsers to communicate with a website exclusively through HTTPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Its purpose is to prevent insecure connections and reduce the risk of certain attacks that target unencrypted web traffic.<\/p>\n\n\n\n<\/div>\n\n<div id=\"mybox-1370905730\" class=\"mybox-content mybox-entity-placement\"><div class=\"early-access-banner-inpost\">\r\n  <div class=\"banner-left-inpost\">\r\n    <div class=\"icon-box-inpost\">\r\n      <img decoding=\"async\" src=\"https:\/\/mybox.com\/help\/wp-content\/uploads\/2026\/02\/square-info-icon.svg\" alt=\"Info\">\r\n    <\/div>\r\n    <div class=\"text-box-inpost\">\r\n      <span class=\"label-inpost\"><span class=\"translation-block translation-block-banner-text\">Acces timpuriu<\/span><\/span>\r\n      <h4><span class=\"translation-block translation-block-banner-text\">Mai ave\u021bi nevoie de ajutor?<\/span><\/h4>\r\n      <p><span class=\"translation-block translation-block-banner-text\">Contacta\u021bi echipa noastr\u0103 de servicii pentru clien\u021bi.<\/span><\/p>\r\n    <\/div>\r\n  <\/div>\r\n\r\n  <div class=\"banner-right-inpost\">\r\n    <a href=\"https:\/\/panel.mybox.com\/helpdesk2\/v\/list\/\" class=\"banner-button-inpost\"><span class=\"translation-block translation-block-banner-text\">Trimite mesaj<\/span><\/a>\r\n  <\/div>\r\n<\/div><\/div>\n\n<div class=\"translation-block translation-block-merged\"><p class=\"wp-block-paragraph\">Once a browser receives an HSTS policy from a website, it automatically uses HTTPS for future visits during the specified policy period.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 ez-toc-wrap-left counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-hsts-and-how-does-it-secure-your-website\/#How_HSTS_Works\" >How HSTS Works<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-hsts-and-how-does-it-secure-your-website\/#Why_HSTS_Is_Used\" >Why HSTS Is Used<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-hsts-and-how-does-it-secure-your-website\/#HSTS_vs_HTTPS\" >HSTS vs. HTTPS<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-hsts-and-how-does-it-secure-your-website\/#Benefits_of_HSTS\" >Benefits of HSTS<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-hsts-and-how-does-it-secure-your-website\/#Improved_Security\" >Improved Security<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-hsts-and-how-does-it-secure-your-website\/#Automatic_HTTPS_Enforcement\" >Automatic HTTPS Enforcement<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-hsts-and-how-does-it-secure-your-website\/#Reduced_Risk_of_Misconfigured_Links\" >Reduced Risk of Misconfigured Links<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-hsts-and-how-does-it-secure-your-website\/#Increased_User_Trust\" >Increased User Trust<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-hsts-and-how-does-it-secure-your-website\/#Practical_Implications\" >Practical Implications<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/mybox.com\/help\/ro\/knowledgebase\/what-is-hsts-and-how-does-it-secure-your-website\/#Summary\" >Summary<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"How_HSTS_Works\"><\/span>How HSTS Works<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">HSTS is implemented through a special HTTP response header sent by the web server.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Strict-Transport-Security: max-age=31536000\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">When a browser receives this header, it remembers that the website should only be accessed using HTTPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If a user later attempts to visit the website using an HTTP address, the browser automatically converts the request to HTTPS before any connection is established.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Why_HSTS_Is_Used\"><\/span>Why HSTS Is Used<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Without HSTS, a user may initially connect to a website using HTTP before being redirected to HTTPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">During this brief period, an attacker could potentially attempt to intercept or manipulate the connection.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">HSTS helps eliminate this risk by ensuring that future connections are made directly through HTTPS.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"HSTS_vs_HTTPS\"><\/span>HSTS vs. HTTPS<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>HSTS \u2260 HTTPS<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">HTTPS encrypts communication between a browser and a web server.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">HSTS is a policy that tells browsers to always use HTTPS when connecting to a website.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A website must already have a valid HTTPS configuration before HSTS can be used.<\/p>\n\n\n\n<figure class=\"wp-block-table\"><table class=\"has-fixed-layout\"><thead><tr><th>HTTPS<\/th><th>HSTS<\/th><\/tr><\/thead><tbody><tr><td>Encrypts data transmission<\/td><td>Enforces HTTPS usage<\/td><\/tr><tr><td>Requires an SSL\/TLS certificate<\/td><td>Requires HTTPS to be enabled<\/td><\/tr><tr><td>Protects communication<\/td><td>Prevents insecure connections<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">HSTS complements HTTPS but does not replace it.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Benefits_of_HSTS\"><\/span>Benefits of HSTS<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Improved_Security\"><\/span>Improved Security<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">HSTS helps protect against attacks that attempt to downgrade connections from HTTPS to HTTP.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Automatic_HTTPS_Enforcement\"><\/span>Automatic HTTPS Enforcement<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Browsers automatically use secure connections without relying on redirects.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Reduced_Risk_of_Misconfigured_Links\"><\/span>Reduced Risk of Misconfigured Links<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Users can enter a website address without specifying HTTPS and still be connected securely.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Increased_User_Trust\"><\/span>Increased User Trust<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">HSTS demonstrates that a website is configured to prioritize secure communication.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Practical_Implications\"><\/span>Practical Implications<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Before enabling HSTS, a website should be fully functional over HTTPS.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If HTTPS is not configured correctly and HSTS is enabled, visitors may be unable to access the website until certificate or configuration issues are resolved.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Because browsers can cache HSTS policies for long periods, configuration changes should be planned carefully.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For this reason, HSTS is usually implemented after HTTPS has been thoroughly tested.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Summary\"><\/span>Summary<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">HSTS (HTTP Strict Transport Security) is a security mechanism that instructs browsers to use HTTPS exclusively when connecting to a website. By preventing insecure connections and enforcing encrypted communication, HSTS helps improve website security and protect users from certain network-based attacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n<\/div>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"template":"","format":"standard","manualknowledgebasecat":[10],"manual_kb_tag":[1543,7006,7007,7008,7009,7010,7011,7012,7013,7014],"class_list":["post-8645","manual_kb","type-manual_kb","status-publish","format-standard","hentry","manualknowledgebasecat-safety","manual_kb_tag-https","manual_kb_tag-strict-transport-security","manual_kb_tag-http-strict-transport-security","manual_kb_tag-hsts","manual_kb_tag-hsts-header","manual_kb_tag-hsts-policy","manual_kb_tag-hsts-preload","manual_kb_tag-https-enforcement","manual_kb_tag-enforce-https","manual_kb_tag-secure-connections"],"_links":{"self":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/8645","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb"}],"about":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/types\/manual_kb"}],"author":[{"embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/users\/1"}],"version-history":[{"count":2,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/8645\/revisions"}],"predecessor-version":[{"id":8646,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb\/8645\/revisions\/8646"}],"wp:attachment":[{"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/media?parent=8645"}],"wp:term":[{"taxonomy":"manualknowledgebasecat","embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manualknowledgebasecat?post=8645"},{"taxonomy":"manual_kb_tag","embeddable":true,"href":"https:\/\/mybox.com\/help\/ro\/wp-json\/wp\/v2\/manual_kb_tag?post=8645"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}