7. Server Processing Model
This section describes how an HSTS Host sends policy to user agents. A server communicates HSTS policy only over secure transport by including the Strict-Transport-Security response header field in HTTPS responses.
For complete details, please refer to the official RFC 6797 text.