If you don’t use HSTS you open your users up to downgrade attacks. https://auth0.com/blog/preventing-https-downgrade-attacks/ https://auth0.com/blog/preventing

If you don’t use HSTS you open your users up to downgrade attacks. https://auth0.com/blog/preventing-https-downgrade-attacks/ https://auth0.com/blog/preventing-https-downgrade-attacks/