https://blog.voina.org/a-security-for-wordpress-blog-http-strict-transport-security/
A+ Security for WordPress Blog - HTTP Strict Transport Security