A security engineer is concerned about susceptibility to HTTP downgrade attacks because the current customer portal redirects users from port 80 to the secure site on port 443. Which of the following would be MOST appropriate to mitigate the attack?

Question

Quizplus · Accepted Answer

HSTS (HTTP Strict Transport Security) is designed to protect against downgrade attacks by ensuring that browsers only connect to a site using HTTPS, even if the user initially requests an HTTP connection.

A Security Engineer Is Concerned About Susceptibility to HTTP Downgrade