Zscaler, Inc.
Systems and methods for improving HTTPS security

Abstract:

Systems and methods include, at the gateway, receiving a domain request from a user device executing a HyperText Transfer Protocol (HTTP) Strict Transport Security (HSTS) application that detects the domain request from a browser or application executed on the user device; transmitting a response to the user device with support of HTTP Security (HTTPS) by the domain; receiving an updated domain request with information removed based on the HTTPS support of the domain; and redirecting the user device to the domain.