A host policy that tells browsers to replace future HTTP connections with HTTPS for a declared lifetime.