{"id":6441,"date":"2026-08-01T17:59:16","date_gmt":"2026-08-01T15:59:16","guid":{"rendered":"https:\/\/www.hostx.ro\/kb\/"},"modified":"2026-08-01T17:59:16","modified_gmt":"2026-08-01T15:59:16","password":"","slug":"cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu","status":"publish","type":"docs","link":"https:\/\/www.hostx.ro\/kb\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\/","title":{"rendered":"Cum activez HSTS (HTTP Strict Transport Security) pentru site-ul meu?"},"content":{"rendered":"<p><strong>HSTS<\/strong> (HTTP Strict Transport Security) este un header de securitate care oblig\u0103 browserele s\u0103 acceseze site-ul <strong>doar prin HTTPS<\/strong>, prevenind atacurile de tip downgrade \u0219i interceptare (man-in-the-middle).<\/p>\n<blockquote><p><strong>Precondi\u021bie obligatorie:<\/strong> site-ul trebuie s\u0103 func\u021bioneze complet pe HTTPS (certificat valid, f\u0103r\u0103 con\u021binut mixt). Dup\u0103 activarea HSTS cu un <code>max-age<\/code> mare, browserele vor refuza HTTP-ul \u2014 dac\u0103 SSL-ul cade, site-ul devine inaccesibil.<\/p><\/blockquote>\n<h3>Apache \/ LiteSpeed WS (.htaccess)<\/h3>\n<p>Adaug\u0103 \u00een <code>.htaccess<\/code>:<\/p>\n<pre><code>&lt;IfModule mod_headers.c&gt;\r\n  Header always set Strict-Transport-Security \"max-age=31536000; includeSubDomains\"\r\n&lt;\/IfModule&gt;<\/code><\/pre>\n<ul>\n<li><code>max-age=31536000<\/code> \u2014 un an (\u00een secunde);<\/li>\n<li><code>includeSubDomains<\/code> \u2014 aplic\u0103 regula \u0219i subdomeniilor (adaug\u0103 doar dac\u0103 TOATE subdomeniile au HTTPS);<\/li>\n<li><code>preload<\/code> \u2014 op\u021bional, pentru a \u00eenscrie domeniul \u00een lista de pre\u00eenc\u0103rcare a browserelor (vezi hstspreload.org).<\/li>\n<\/ul>\n<h3>Nginx<\/h3>\n<pre><code>add_header Strict-Transport-Security \"max-age=31536000; includeSubDomains\" always;<\/code><\/pre>\n<h3>Testare gradual\u0103<\/h3>\n<p>Recomandat: porne\u0219te cu un <code>max-age<\/code> mic (ex. 300 secunde), verific\u0103 faptul c\u0103 totul func\u021bioneaz\u0103 pe HTTPS, apoi cre\u0219te la un an. Verific\u0103 antetul cu <code>curl -I https:\/\/domeniul.tld | grep -i strict<\/code>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>HSTS (HTTP Strict Transport Security) este un header de securitate care oblig\u0103 browserele s\u0103 acceseze site-ul doar prin HTTPS, prevenind atacurile de tip downgrade \u0219i interceptare (man-in-the-middle). Precondi\u021bie obligatorie: site-ul trebuie s\u0103 func\u021bioneze complet pe HTTPS (certificat valid, f\u0103r\u0103 con\u021binut mixt). Dup\u0103 activarea HSTS cu un max-age mare, browserele vor refuza HTTP-ul \u2014 dac\u0103 SSL-ul &#8230; <a title=\"Cum activez HSTS (HTTP Strict Transport Security) pentru site-ul meu?\" class=\"read-more\" href=\"https:\/\/www.hostx.ro\/kb\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\/\" aria-label=\"Cite\u0219te mai multe despre Cum activez HSTS (HTTP Strict Transport Security) pentru site-ul meu?\">Cite\u0219te mai mult<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"whmcs_kb_id":0,"footnotes":""},"doc_category":[92],"doc_tag":[267,242,328,227,322,229,245,246],"class_list":["post-6441","docs","type-docs","status-publish","hentry","doc_category-certificate-ssl","doc_tag-htaccess","doc_tag-apache","doc_tag-certificat-ssl","doc_tag-configurare","doc_tag-https","doc_tag-nginx","doc_tag-securitate","doc_tag-ssl-tls"],"year_month":"2026-08","word_count":162,"total_views":"3","reactions":{"happy":"0","normal":"0","sad":"0"},"author_info":{"name":"benyhill","author_nicename":"benyhill","author_url":"https:\/\/www.hostx.ro\/kb\/author\/benyhill\/"},"doc_category_info":[{"term_name":"Certificate SSL","term_url":"https:\/\/www.hostx.ro\/kb\/docs-category\/certificate-ssl\/"}],"doc_tag_info":[{"term_name":".htaccess","term_url":"https:\/\/www.hostx.ro\/kb\/docs-tag\/htaccess\/"},{"term_name":"Apache","term_url":"https:\/\/www.hostx.ro\/kb\/docs-tag\/apache\/"},{"term_name":"certificat SSL","term_url":"https:\/\/www.hostx.ro\/kb\/docs-tag\/certificat-ssl\/"},{"term_name":"configurare","term_url":"https:\/\/www.hostx.ro\/kb\/docs-tag\/configurare\/"},{"term_name":"HTTPS","term_url":"https:\/\/www.hostx.ro\/kb\/docs-tag\/https\/"},{"term_name":"Nginx","term_url":"https:\/\/www.hostx.ro\/kb\/docs-tag\/nginx\/"},{"term_name":"securitate","term_url":"https:\/\/www.hostx.ro\/kb\/docs-tag\/securitate\/"},{"term_name":"SSL\/TLS","term_url":"https:\/\/www.hostx.ro\/kb\/docs-tag\/ssl-tls\/"}],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.0 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Activeaz\u0103 HSTS pentru site-ul t\u0103u - Securitate HTTPS - Centrul de suport HostX<\/title>\n<meta name=\"description\" content=\"Activeaz\u0103 HSTS pentru a for\u021ba HTTPS \u0219i previne atacurile man-in-the-middle. Configurare \u00een .htaccess, Nginx cu max-age \u0219i includeSubDomains pentru securitate maxim\u0103.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.hostx.ro\/kb\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\/\" \/>\n<meta property=\"og:locale\" content=\"ro_RO\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Activeaz\u0103 HSTS pentru site-ul t\u0103u - Securitate HTTPS - Centrul de suport HostX\" \/>\n<meta property=\"og:description\" content=\"Activeaz\u0103 HSTS pentru a for\u021ba HTTPS \u0219i previne atacurile man-in-the-middle. Configurare \u00een .htaccess, Nginx cu max-age \u0219i includeSubDomains pentru securitate maxim\u0103.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.hostx.ro\/kb\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\/\" \/>\n<meta property=\"og:site_name\" content=\"Centrul de suport HostX\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Timp estimat pentru citire\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minut\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.hostx.ro\\\/kb\\\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\\\/\",\"url\":\"https:\\\/\\\/www.hostx.ro\\\/kb\\\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\\\/\",\"name\":\"Activeaz\u0103 HSTS pentru site-ul t\u0103u - Securitate HTTPS - Centrul de suport HostX\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.hostx.ro\\\/kb\\\/#website\"},\"datePublished\":\"2026-08-01T15:59:16+00:00\",\"description\":\"Activeaz\u0103 HSTS pentru a for\u021ba HTTPS \u0219i previne atacurile man-in-the-middle. Configurare \u00een .htaccess, Nginx cu max-age \u0219i includeSubDomains pentru securitate maxim\u0103.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.hostx.ro\\\/kb\\\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\\\/#breadcrumb\"},\"inLanguage\":\"ro-RO\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.hostx.ro\\\/kb\\\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.hostx.ro\\\/kb\\\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Prima pagin\u0103\",\"item\":\"https:\\\/\\\/www.hostx.ro\\\/kb\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"InfoCentru\",\"item\":\"https:\\\/\\\/www.hostx.ro\\\/kb\\\/docs\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Cum activez HSTS (HTTP Strict Transport Security) pentru site-ul meu?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.hostx.ro\\\/kb\\\/#website\",\"url\":\"https:\\\/\\\/www.hostx.ro\\\/kb\\\/\",\"name\":\"Centrul de suport HostX\",\"description\":\"tutoriale gazduire web, domenii web \u0219i servere\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.hostx.ro\\\/kb\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"ro-RO\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Activeaz\u0103 HSTS pentru site-ul t\u0103u - Securitate HTTPS - Centrul de suport HostX","description":"Activeaz\u0103 HSTS pentru a for\u021ba HTTPS \u0219i previne atacurile man-in-the-middle. Configurare \u00een .htaccess, Nginx cu max-age \u0219i includeSubDomains pentru securitate maxim\u0103.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.hostx.ro\/kb\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\/","og_locale":"ro_RO","og_type":"article","og_title":"Activeaz\u0103 HSTS pentru site-ul t\u0103u - Securitate HTTPS - Centrul de suport HostX","og_description":"Activeaz\u0103 HSTS pentru a for\u021ba HTTPS \u0219i previne atacurile man-in-the-middle. Configurare \u00een .htaccess, Nginx cu max-age \u0219i includeSubDomains pentru securitate maxim\u0103.","og_url":"https:\/\/www.hostx.ro\/kb\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\/","og_site_name":"Centrul de suport HostX","twitter_card":"summary_large_image","twitter_misc":{"Timp estimat pentru citire":"1 minut"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.hostx.ro\/kb\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\/","url":"https:\/\/www.hostx.ro\/kb\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\/","name":"Activeaz\u0103 HSTS pentru site-ul t\u0103u - Securitate HTTPS - Centrul de suport HostX","isPartOf":{"@id":"https:\/\/www.hostx.ro\/kb\/#website"},"datePublished":"2026-08-01T15:59:16+00:00","description":"Activeaz\u0103 HSTS pentru a for\u021ba HTTPS \u0219i previne atacurile man-in-the-middle. Configurare \u00een .htaccess, Nginx cu max-age \u0219i includeSubDomains pentru securitate maxim\u0103.","breadcrumb":{"@id":"https:\/\/www.hostx.ro\/kb\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\/#breadcrumb"},"inLanguage":"ro-RO","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.hostx.ro\/kb\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.hostx.ro\/kb\/cum-activez-hsts-http-strict-transport-security-pentru-site-ul-meu\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Prima pagin\u0103","item":"https:\/\/www.hostx.ro\/kb\/"},{"@type":"ListItem","position":2,"name":"InfoCentru","item":"https:\/\/www.hostx.ro\/kb\/docs\/"},{"@type":"ListItem","position":3,"name":"Cum activez HSTS (HTTP Strict Transport Security) pentru site-ul meu?"}]},{"@type":"WebSite","@id":"https:\/\/www.hostx.ro\/kb\/#website","url":"https:\/\/www.hostx.ro\/kb\/","name":"Centrul de suport HostX","description":"tutoriale gazduire web, domenii web \u0219i servere","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.hostx.ro\/kb\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"ro-RO"}]}},"knowledge_base_info":[],"knowledge_base_slug":[],"_links":{"self":[{"href":"https:\/\/www.hostx.ro\/kb\/wp-json\/wp\/v2\/docs\/6441","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hostx.ro\/kb\/wp-json\/wp\/v2\/docs"}],"about":[{"href":"https:\/\/www.hostx.ro\/kb\/wp-json\/wp\/v2\/types\/docs"}],"author":[{"embeddable":true,"href":"https:\/\/www.hostx.ro\/kb\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hostx.ro\/kb\/wp-json\/wp\/v2\/comments?post=6441"}],"version-history":[{"count":1,"href":"https:\/\/www.hostx.ro\/kb\/wp-json\/wp\/v2\/docs\/6441\/revisions"}],"predecessor-version":[{"id":6553,"href":"https:\/\/www.hostx.ro\/kb\/wp-json\/wp\/v2\/docs\/6441\/revisions\/6553"}],"wp:attachment":[{"href":"https:\/\/www.hostx.ro\/kb\/wp-json\/wp\/v2\/media?parent=6441"}],"wp:term":[{"taxonomy":"doc_category","embeddable":true,"href":"https:\/\/www.hostx.ro\/kb\/wp-json\/wp\/v2\/doc_category?post=6441"},{"taxonomy":"doc_tag","embeddable":true,"href":"https:\/\/www.hostx.ro\/kb\/wp-json\/wp\/v2\/doc_tag?post=6441"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}