Enable HSTS to force clients to use secure connections only Apache apache, HSTS, security, ssl Use HTTP Strict Transport Security to force client to use secure connections only