We're introducing another enhancement to the ClouDNS FreeSSL service. You can now enable or disable HTTP Strict Transport Security (HSTS) directly from the Web interface, API, and Control Panel.
HSTS is a web security mechanism that instructs browsers to communicate with your website only over HTTPS. Once enabled, browsers automatically redirect all future requests to the secure HTTPS version of your site, helping protect users against protocol downgrade attacks and cookie hijacking.
The HSTS option becomes available once FreeSSL is active for the selected zone. For zones using Web Redirects, enabling HSTS also applies the policy to the configured web redirects. For Parked Domains, HSTS is applied to the parked domain itself.
This update provides more control over HTTPS enforcement for supported FreeSSL configurations.
More platform improvements are coming soon. Stay tuned!