5. HSTS Mechanism Overview

This section summarizes how HSTS Hosts communicate HSTS policy to user agents and how user agents store, update, and enforce that policy. The mechanism is centered on the Strict-Transport-Security response header field, policy lifetime, optional subdomain coverage, and user-agent handling of known HSTS hosts.

For complete details, please refer to the official RFC 6797 text.