← Back to Baseline

MB-R291

HUMAN VERIFICATION REQUIRED ASVS 3.7.4 HSTS preload

MB-C18 ASVS Level 3 Human Assurance Medium

The application's top-level domain (e.g., site.tld) is added to the public preload list for HTTP Strict Transport Security (HSTS). This ensures that the use of TLS for the application is built directly into the main browsers, rather than relying only on the Strict-Transport-Security response header field.