Strict Transport Security

STS is a HTTP header which can be set.

In short: use always SSL, if no SSL is available abort the connection.

Changes for magento

• Check wether both secure and unsecure url are https.
• Add a Strict Transport Security Header to magento.

Goal of this extention

You know what sidejacking and SSLStrip is? This should help a bit against it.