HSTS max-age
The two-year max-age MDN recommends.
MDNPragmatic, step-by-step masterclasses forged in production environments and modern global standards.
Lessons are ordered so each stands on the previous one. You can also jump in anywhere.
A path to understanding web security and ethical hacking. This track has no lessons yet, and we say so plainly.
Tap any step to read the details behind it.
This track's name.
Every lesson with diagrams.
AI guidance in every lesson.
Each lesson stands on the previous one.
No lessons are published yet.
No sign-up.
Every lesson has the same familiar shape, so you move through easily.
Tap any solution to see exactly what it includes.
Each lesson explains the idea with a diagram.
Only what genuinely helps.
The fastest path for that task.
We set MDN's guides to TLS and cookies beside Seemerce's security track.
MDN: all resources must load over HTTPS and HTTP should redirect to HTTPS.
With us This track has no lessons yet and we say so.
MDN: a Strict-Transport-Security header with max-age of at least six months, ideally two years.
With us This track has no lessons yet and we say so.
MDN: the Secure, HttpOnly and SameSite attributes protect sessions.
With us This track has no lessons yet and we say so.
This track is Security and ethical hacking.
With us On our website security page too, no penetration test is run without the owner's written permission.
MDN has published its path in three levels.
With us This track has no lessons yet and we say so.
Sources: MDN — TLS and cookies
Each figure is from its own source.
The two-year max-age MDN recommends.
MDNThe recommended minimum for HSTS.
MDNSecure, HttpOnly and SameSite.
MDNRedirecting HTTP to HTTPS.
MDNThis track has no lessons yet.
SeemerceFree with no sign-up.
SeemerceSources: MDN — TLS and cookies
Only what the reference document says outright is marked.
| Practice | MDN | Seemerce |
|---|---|---|
| HTTPS and the HTTP redirect1 of 1 | Coming in the track | |
| HSTS1 of 1 | Coming in the track | |
| Secure cookies1 of 1 | Coming in the track | |
| Free1 of 1 | Free with no sign-up |
stated on their published page not stated there (it may still be done)
Sources: MDN — TLS and cookies
The two values MDN gives for max-age.
Sources: MDN — TLS
Only what this page already promises.
This site only needs essential cookies to work. With your permission, we also use Google Analytics to learn which pages are most useful. It is your choice, and you can change it at any time. Cookie Policy