HSTS

HTTP Strict Transport Security is an instruction to the browser: "always connect to this domain over HTTPS". It prevents situations where someone tries to downgrade the connection to unencrypted HTTP to eavesdrop on data.

It is one of the basic security headers, alongside Content-Security-Policy. You turn it on once and it genuinely raises the level of protection without affecting the look or operation of the site.