Der HTTP Strict-Transport-Security (HSTS)-Header weist den Browser an, nur https zu verwenden.
https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
Dokumentstandards