[−][src]Enum rocket_contrib::helmet::Hsts
The HTTP Strict-Transport-Security (HSTS) header: enforces strict HTTPS usage.
HSTS tells the browser that the site should only be accessed using HTTPS
instead of HTTP. HSTS prevents a variety of downgrading attacks and should
always be used when TLS is enabled. SpaceHelmet
will turn HSTS on and
issue a warning if you enable TLS without enabling HSTS when the application
is run in the staging or production environments.
While HSTS is important for HTTPS security, incorrectly configured HSTS can lead to problems as you are disallowing access to non-HTTPS enabled parts of your site. Yelp engineering has good discussion of potential challenges that can arise and how to roll this out in a large scale setting. So, if you use TLS, use HSTS, but roll it out with care.
Variants
Enable(Duration)
Browser should only permit this site to be accesses by HTTPS for the
next Duration
.
IncludeSubDomains(Duration)
Like Hsts::Enable
, but also apply to all of the site's subdomains.
Preload(Duration)
Google maintains an HSTS preload service that can be used to prevent the browser from ever connecting to your site over an insecure connection. Read more here. Don't enable this before you have registered your site.
Trait Implementations
impl Policy for Hsts
[src]
impl Default for Hsts
[src]
Defaults to Hsts::Enable(Duration::weeks(52))
.
impl<'a> Into<Header<'static>> for &'a Hsts
[src]
Auto Trait Implementations
impl Send for Hsts
impl Unpin for Hsts
impl Sync for Hsts
impl UnwindSafe for Hsts
impl RefUnwindSafe for Hsts
Blanket Implementations
impl<T> From<T> for T
[src]
impl<T, U> Into<U> for T where
U: From<T>,
[src]
U: From<T>,
impl<T, U> TryFrom<U> for T where
U: Into<T>,
[src]
U: Into<T>,
type Error = Infallible
The type returned in the event of a conversion error.
fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>
[src]
impl<T, U> TryInto<U> for T where
U: TryFrom<T>,
[src]
U: TryFrom<T>,
type Error = <U as TryFrom<T>>::Error
The type returned in the event of a conversion error.
fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>
[src]
impl<T> BorrowMut<T> for T where
T: ?Sized,
[src]
T: ?Sized,
fn borrow_mut(&mut self) -> &mut T
[src]
impl<T> Borrow<T> for T where
T: ?Sized,
[src]
T: ?Sized,
impl<T> Any for T where
T: 'static + ?Sized,
[src]
T: 'static + ?Sized,
impl<T> Typeable for T where
T: Any,
T: Any,
impl<T> IntoCollection<T> for T
fn into_collection<A>(self) -> SmallVec<A> where
A: Array<Item = T>,
A: Array<Item = T>,
fn mapped<U, F, A>(self, f: F) -> SmallVec<A> where
A: Array<Item = U>,
F: FnMut(T) -> U,
A: Array<Item = U>,
F: FnMut(T) -> U,
impl<T, I> AsResult<T, I> for T where
I: Input,
I: Input,
impl<T> IntoSql for T
[src]
fn into_sql<T>(self) -> Self::Expression where
Self: AsExpression<T>,
[src]
Self: AsExpression<T>,
Convert self
to an expression for Diesel's query builder. Read more
fn as_sql<'a, T>(&'a self) -> <&'a Self as AsExpression<T>>::Expression where
&'a Self: AsExpression<T>,
[src]
&'a Self: AsExpression<T>,
Convert &self
to an expression for Diesel's query builder. Read more
impl<T> Same<T> for T
type Output = T
Should always be Self
impl<T> Erased for T
impl<T, U> TryInto<U> for T where
U: TryFrom<T>,
U: TryFrom<T>,