Agent Disco check

TLS + HSTS + HTTPS redirect

← Back to all checks

passive · Category Identity & verification · Weight 10 · Key identity.tls

Description

Three-part trust check: TLS certificate validity (chain + dates), Strict-Transport-Security with max-age >= 15552000 (6 months, the HSTS preload minimum), and a http://https:// redirect. Cert problems are a hard fail — agents won't negotiate with a site that can't prove its identity.