Support by various browsers for HTTP Strict Transport Security (HSTS)

Background: https://developer.mozilla.org/en-US/docs/Security/HTTP_Strict_Transport_Security.

Browser support: see column "Strict Transport Security" at http://browserscope2.org/?category=security&.

List of some companies that do and don't use HTTP Strict Transport Security: https://www.eff.org/deeplinks/2013/11/encrypt-web-report-whos-doing-what.

 

From https://www.owasp.org/index.php/HTTP_Strict_Transport_Security:

 

IE 12 to Support HSTS

 

This thread may also be of interest regarding HSTS on mobile browsers:
https://www.wilderssecurity.com/threads/security-test-browserscope-on-mobile.362281/

 

HSTS – The missing link in Transport Layer Security

 

Manually enforcing HSTS in Google Chrome

 

Firefox HSTS-related extensions:
Force-TLS
Enforce Encryption
Strict Transport Security - Detector

 

I don't think it's the browsers that are so much the issue as it is just the lack of so many sites providing it.

 

IE doesn't support it yet, but will in IE 12.