https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
www.letsencrypt.org > apache > certbot
certbot … –hsts
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains";
https://scarybeastsecurity.blogspot.fr/2016/11/0day-exploit-compromising-linux-desktop.html