Description
Three-part trust check: TLS certificate validity (chain + dates), Strict-Transport-Security with max-age >= 15552000 (6 months, the HSTS preload minimum), and a http:// → https:// redirect. Cert problems are a hard fail — agents won't negotiate with a site that can't prove its identity.