{"id":23796,"date":"2026-08-07T03:19:38","date_gmt":"2026-08-07T00:19:38","guid":{"rendered":"https:\/\/www.cenuta.com\/blog\/?p=23796"},"modified":"2026-08-07T03:19:39","modified_gmt":"2026-08-07T00:19:39","slug":"hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi","status":"publish","type":"post","link":"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/","title":{"rendered":"HSTS (HTTP Strict Transport Security) Nedir? Neden Gerekli ve Nas\u0131l Kurulur? (2026 G\u00fcvenlik Rehberi)"},"content":{"rendered":"\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_71 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">\u0130\u00e7indekiler<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a8013eb7b65f\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6a8013eb7b65f\"  aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#Giris_SSL_Sertifikasi_Artik_Tek_Basina_Yeterli_Degil\" title=\"Giri\u015f: SSL Sertifikas\u0131 Art\u0131k Tek Ba\u015f\u0131na Yeterli De\u011fil\">Giri\u015f: SSL Sertifikas\u0131 Art\u0131k Tek Ba\u015f\u0131na Yeterli De\u011fil<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#Gelisme_HSTSnin_Anatomisi_ve_Calisma_Mantigi\" title=\"Geli\u015fme: HSTS&#8217;nin Anatomisi ve \u00c7al\u0131\u015fma Mant\u0131\u011f\u0131\">Geli\u015fme: HSTS&#8217;nin Anatomisi ve \u00c7al\u0131\u015fma Mant\u0131\u011f\u0131<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#%E2%80%9CSSL_Stripping%E2%80%9D_SSL_Soyma_Saldirisi_Nasil_Gerceklesir\" title=\"&#8220;SSL Stripping&#8221; (SSL Soyma) Sald\u0131r\u0131s\u0131 Nas\u0131l Ger\u00e7ekle\u015fir?\">&#8220;SSL Stripping&#8221; (SSL Soyma) Sald\u0131r\u0131s\u0131 Nas\u0131l Ger\u00e7ekle\u015fir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#HSTSnin_Site_Hizina_ve_SEOya_Gizli_Katkisi\" title=\"HSTS&#8217;nin Site H\u0131z\u0131na ve SEO&#8217;ya Gizli Katk\u0131s\u0131\">HSTS&#8217;nin Site H\u0131z\u0131na ve SEO&#8217;ya Gizli Katk\u0131s\u0131<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#Adim_Adim_HSTS_Kurulumu_Sunucu_ve_Altyapi_Ayarlari\" title=\"Ad\u0131m Ad\u0131m HSTS Kurulumu (Sunucu ve Altyap\u0131 Ayarlar\u0131)\">Ad\u0131m Ad\u0131m HSTS Kurulumu (Sunucu ve Altyap\u0131 Ayarlar\u0131)<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#1_Apache_Sunucularda_Kurulum_htaccess\" title=\"1. Apache Sunucularda Kurulum (.htaccess)\">1. Apache Sunucularda Kurulum (.htaccess)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#2_Nginx_Sunucularda_Kurulum\" title=\"2. Nginx Sunucularda Kurulum\">2. Nginx Sunucularda Kurulum<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#3_WordPress_Kullanicilari_Icin_Kodsuz_Yontem\" title=\"3. WordPress Kullan\u0131c\u0131lar\u0131 \u0130\u00e7in (Kodsuz Y\u00f6ntem)\">3. WordPress Kullan\u0131c\u0131lar\u0131 \u0130\u00e7in (Kodsuz Y\u00f6ntem)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#4_CDN_Cloudflare_Uzerinden_HSTS_Aktiflestirme\" title=\"4. CDN (Cloudflare) \u00dczerinden HSTS Aktifle\u015ftirme\">4. CDN (Cloudflare) \u00dczerinden HSTS Aktifle\u015ftirme<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#Guvenligin_Zirvesi_HSTS_Preload_Onyukleme_Listesi_Nedir\" title=\"G\u00fcvenli\u011fin Zirvesi: HSTS Preload (\u00d6ny\u00fckleme) Listesi Nedir?\">G\u00fcvenli\u011fin Zirvesi: HSTS Preload (\u00d6ny\u00fckleme) Listesi Nedir?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#Kurulumda_Dikkat_Edilmesi_Gereken_Olumcul_Riskler\" title=\"Kurulumda Dikkat Edilmesi Gereken \u00d6l\u00fcmc\u00fcl Riskler\">Kurulumda Dikkat Edilmesi Gereken \u00d6l\u00fcmc\u00fcl Riskler<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#Sonuc_Gecilmez_Bir_Dijital_Kale_Insa_Etmek\" title=\"Sonu\u00e7: Ge\u00e7ilmez Bir Dijital Kale \u0130n\u015fa Etmek\">Sonu\u00e7: Ge\u00e7ilmez Bir Dijital Kale \u0130n\u015fa Etmek<\/a><\/li><\/ul><\/nav><\/div>\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Giris_SSL_Sertifikasi_Artik_Tek_Basina_Yeterli_Degil\"><\/span>Giri\u015f: SSL Sertifikas\u0131 Art\u0131k Tek Ba\u015f\u0131na Yeterli De\u011fil<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Dijital d\u00fcnyan\u0131n evrimi, siber g\u00fcvenli\u011fi bir l\u00fcks olmaktan \u00e7\u0131kar\u0131p mutlak bir zorunluluk haline getirmi\u015ftir. G\u00fcn\u00fcm\u00fczde web sitenize bir SSL sertifikas\u0131 kurmak ve adres \u00e7ubu\u011funda o k\u00fc\u00e7\u00fck &#8220;kilit&#8221; ikonunu g\u00f6rmek, g\u00fcvenli\u011fin sadece ilk ad\u0131m\u0131d\u0131r. Ancak bir\u00e7ok web sitesi sahibi, HTTPS y\u00f6nlendirmesi (301 Redirect) yapt\u0131ktan sonra sitelerinin %100 g\u00fcvende oldu\u011funa inanarak b\u00fcy\u00fck bir yan\u0131lg\u0131ya d\u00fc\u015fer.<\/p>\n\n\n\n<p>Ger\u00e7ek \u015fu ki; standart bir HTTPS y\u00f6nlendirmesi, bilgisayar korsanlar\u0131n\u0131n araya girebilece\u011fi birka\u00e7 milisaniyelik, hayati bir a\u00e7\u0131k kap\u0131 b\u0131rak\u0131r. \u0130nternet taray\u0131c\u0131lar\u0131 (Chrome, Safari, Firefox), bir kullan\u0131c\u0131 adres \u00e7ubu\u011funa sadece <code>ornek.com<\/code> yazd\u0131\u011f\u0131nda, varsay\u0131lan olarak siteye \u00f6nce g\u00fcvensiz olan <code>http:\/\/<\/code> protokol\u00fc \u00fczerinden gitmeye \u00e7al\u0131\u015f\u0131r. Sunucu bu iste\u011fi al\u0131r ve &#8220;Hay\u0131r, g\u00fcvenli ba\u011flant\u0131ya (HTTPS) ge\u00e7&#8221; der. \u0130\u015fte siber sald\u0131rganlar, tam da o ilk g\u00fcvensiz <code>http:\/\/<\/code> iste\u011fi s\u0131ras\u0131nda araya s\u0131zarak kullan\u0131c\u0131n\u0131n verilerini ele ge\u00e7irirler.<\/p>\n\n\n\n<p>Bu devasa g\u00fcvenlik a\u00e7\u0131\u011f\u0131n\u0131 kapatan, taray\u0131c\u0131lara &#8220;Bu siteyle asla g\u00fcvensiz konu\u015fma!&#8221; emrini veren nihai kilit mekanizmas\u0131n\u0131n ad\u0131 <strong>HSTS (HTTP Strict Transport Security)<\/strong>&#8216;dir. Bu derinlemesine teknik rehberde; HSTS teknolojisinin ne oldu\u011funu, SSL Stripping (SSL Soyma) sald\u0131r\u0131lar\u0131n\u0131 nas\u0131l engelledi\u011fini, web sitenizin h\u0131z\u0131na ve SEO skoruna olan s\u00fcrpriz katk\u0131lar\u0131n\u0131 ve altyap\u0131n\u0131za (Apache, Nginx, WordPress) bu korumay\u0131 nas\u0131l entegre edece\u011finizi t\u00fcm \u015feffafl\u0131\u011f\u0131yla inceliyoruz.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Gelisme_HSTSnin_Anatomisi_ve_Calisma_Mantigi\"><\/span>Geli\u015fme: HSTS&#8217;nin Anatomisi ve \u00c7al\u0131\u015fma Mant\u0131\u011f\u0131<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p><strong>HSTS (HTTP Strict Transport Security)<\/strong>, web sunucunuzun ziyaret\u00e7inin taray\u0131c\u0131s\u0131na g\u00f6nderdi\u011fi \u00f6zel bir g\u00fcvenlik ba\u015fl\u0131\u011f\u0131d\u0131r (Security Header). Bu ba\u015fl\u0131k, taray\u0131c\u0131ya \u015fu net talimat\u0131 verir: <em>&#8220;Bundan sonraki X ay boyunca benim siteme ba\u011flan\u0131rken kesinlikle HTTP kullanma. Kullan\u0131c\u0131 adres \u00e7ubu\u011funa http:\/\/ yazsa bile, sen onu arka planda otomatik olarak https:\/\/&#8217;ye \u00e7evir ve sunucuya \u00f6yle gel.&#8221;<\/em><\/p>\n\n\n\n<p>HSTS aktif olan bir siteye giren kullan\u0131c\u0131, sunucu seviyesindeki 301 y\u00f6nlendirmesini beklemek zorunda kalmaz; y\u00f6nlendirme do\u011frudan kullan\u0131c\u0131n\u0131n kendi taray\u0131c\u0131s\u0131n\u0131n i\u00e7inde, internete hi\u00e7 \u00e7\u0131kmadan (Dahili Y\u00f6nlendirme \/ Internal Redirect) ger\u00e7ekle\u015fir.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E2%80%9CSSL_Stripping%E2%80%9D_SSL_Soyma_Saldirisi_Nasil_Gerceklesir\"><\/span>&#8220;SSL Stripping&#8221; (SSL Soyma) Sald\u0131r\u0131s\u0131 Nas\u0131l Ger\u00e7ekle\u015fir?<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p>HSTS&#8217;nin \u00f6nemini anlamak i\u00e7in, HSTS olmayan bir senaryoda siber sald\u0131r\u0131lar\u0131n nas\u0131l ger\u00e7ekle\u015fti\u011fine yak\u0131ndan bakal\u0131m.<\/p>\n\n\n\n<p>Finansal dan\u0131\u015fman olan <strong>Mert<\/strong>, halka a\u00e7\u0131k bir kafenin \u00fccretsiz Wi-Fi a\u011f\u0131na ba\u011flanarak \u00e7al\u0131\u015ft\u0131\u011f\u0131 bankan\u0131n web sitesine (<code>banka.com<\/code>) giri\u015f yapmak ister. Mert, adres \u00e7ubu\u011funa sadece <code>banka.com<\/code> yazar ve Enter&#8217;a basar. Kafede oturan ve ayn\u0131 a\u011fa ba\u011fl\u0131 olan k\u00f6t\u00fc niyetli bilgisayar korsan\u0131 <strong>Ayla<\/strong>, &#8220;Man-in-the-Middle&#8221; (Ortadaki Adam) sald\u0131r\u0131s\u0131 d\u00fczenlemektedir.<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>Mert&#8217;in taray\u0131c\u0131s\u0131 ilk iste\u011fi g\u00fcvensiz olan <code>[http:\/\/banka.com](http:\/\/banka.com)<\/code> olarak g\u00f6nderir.<\/li>\n\n\n\n<li>Ayla bu g\u00fcvensiz iste\u011fi havada yakalar (Intercept).<\/li>\n\n\n\n<li>Ayla, bankan\u0131n ger\u00e7ek sunucusuna HTTPS ile g\u00fcvenli bir \u015fekilde ba\u011flan\u0131r, ancak Mert&#8217;e d\u00f6nerken aradaki g\u00fcvenli\u011fi soyup (SSL Stripping) siteyi Mert&#8217;e g\u00fcvensiz HTTP olarak g\u00f6sterir.<\/li>\n\n\n\n<li>Mert, kar\u015f\u0131s\u0131ndaki sayfan\u0131n ger\u00e7ek banka sitesi oldu\u011funu d\u00fc\u015f\u00fcnerek \u015fifresini girer. \u015eifre do\u011frudan Ayla&#8217;n\u0131n ekran\u0131na d\u00fc\u015fer.<\/li>\n<\/ol>\n\n\n\n<p><strong>E\u011fer bankan\u0131n sitesinde HSTS kurulu olsayd\u0131 ne olurdu?<\/strong> Mert <code>banka.com<\/code> yazd\u0131\u011f\u0131nda, taray\u0131c\u0131 daha \u00f6nce HSTS ba\u015fl\u0131\u011f\u0131n\u0131 kaydetti\u011fi i\u00e7in, iste\u011fi kafenin Wi-Fi a\u011f\u0131na g\u00f6ndermeden \u00f6nce <em>kendi i\u00e7inde<\/em> an\u0131nda <code>[https:\/\/banka.com](https:\/\/banka.com)<\/code> olarak g\u00fcncellerdi. \u0130stek a\u011fa \u00e7\u0131kt\u0131\u011f\u0131 an \u015fifreli oldu\u011fu i\u00e7in, Ayla araya s\u0131zamaz ve sald\u0131r\u0131 tamamen ba\u015far\u0131s\u0131z olurdu. HSTS, i\u015fte bu ilk saniyelik g\u00fcvensiz iste\u011fi donan\u0131msal olarak yok eder.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"HSTSnin_Site_Hizina_ve_SEOya_Gizli_Katkisi\"><\/span>HSTS&#8217;nin Site H\u0131z\u0131na ve SEO&#8217;ya Gizli Katk\u0131s\u0131<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p>HSTS, sadece bir g\u00fcvenlik arac\u0131 de\u011fildir; ayn\u0131 zamanda bir performans art\u0131r\u0131c\u0131d\u0131r. HSTS olmayan sitelerde <code>http -&gt; https<\/code> y\u00f6nlendirmesi i\u00e7in verinin sunucuya gidip, y\u00f6nlendirme komutunu al\u0131p geri gelmesi gerekir. Bu i\u015flem a\u011f gecikmesine (Latency) neden olur ve sayfa y\u00fcklenme s\u00fcresine (TTFB) ortalama 100-300 milisaniye ekler. HSTS aktif oldu\u011funda, taray\u0131c\u0131 sunucuya hi\u00e7 sormadan y\u00f6nlendirmeyi lokal olarak yapt\u0131\u011f\u0131 i\u00e7in bu gecikme tamamen s\u0131f\u0131rlan\u0131r. Arama motoru devleri (Google), sayfa h\u0131z\u0131n\u0131 ve \u00fcst d\u00fczey g\u00fcvenli\u011fi do\u011frudan bir s\u0131ralama fakt\u00f6r\u00fc (Ranking Factor) olarak kulland\u0131\u011f\u0131 i\u00e7in, HSTS&#8217;ye sahip siteler organik aramalarda algoritmik bir avantaj elde eder.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Adim_Adim_HSTS_Kurulumu_Sunucu_ve_Altyapi_Ayarlari\"><\/span>Ad\u0131m Ad\u0131m HSTS Kurulumu (Sunucu ve Altyap\u0131 Ayarlar\u0131)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>HSTS ba\u015fl\u0131\u011f\u0131n\u0131 web sitenize entegre etmek i\u00e7in sunucunuzun ana yap\u0131land\u0131rma dosyalar\u0131na k\u00fc\u00e7\u00fck bir kod blo\u011fu eklemeniz yeterlidir. Ancak bu i\u015fleme ge\u00e7meden \u00f6nce sitenizde ge\u00e7erli bir SSL sertifikas\u0131 oldu\u011fundan ve <code>http -&gt; https<\/code> y\u00f6nlendirmesinin sorunsuz \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olmal\u0131s\u0131n\u0131z.<\/p>\n\n\n\n<p>\u00d6rnek HSTS kodu \u015fu parametreleri i\u00e7erir: <code>Strict-Transport-Security: max-age=31536000; includeSubDomains; preload<\/code><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>max-age:<\/strong> Taray\u0131c\u0131n\u0131n bu kural\u0131 saniye cinsinden ne kadar s\u00fcre haf\u0131zas\u0131nda tutaca\u011f\u0131n\u0131 belirler (31536000 saniye = 1 Y\u0131l).<\/li>\n\n\n\n<li><strong>includeSubDomains:<\/strong> Kural\u0131n sadece ana alan ad\u0131n\u0131 de\u011fil, t\u00fcm alt alan adlar\u0131n\u0131 (blog.siteniz.com, mail.siteniz.com) kapsamas\u0131n\u0131 sa\u011flar.<\/li>\n\n\n\n<li><strong>preload:<\/strong> Sitenin taray\u0131c\u0131lar\u0131n \u00e7ekirdek listesine girmesine izin verir (Detaylar\u0131 a\u015fa\u011f\u0131da a\u00e7\u0131klanm\u0131\u015ft\u0131r).<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"1_Apache_Sunucularda_Kurulum_htaccess\"><\/span>1. Apache Sunucularda Kurulum (.htaccess)<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p>E\u011fer standart bir payla\u015f\u0131ml\u0131 hosting kullan\u0131yorsan\u0131z (cPanel), sitenizin k\u00f6k dizininde bulunan <code>.htaccess<\/code> dosyas\u0131n\u0131 d\u00fczenleyerek HSTS&#8217;yi aktif edebilirsiniz. Dosyan\u0131n en \u00fcst\u00fcne \u015fu kodu eklemeniz yeterlidir:<\/p>\n\n\n\n<p>Apache<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&lt;IfModule mod_headers.c&gt;\nHeader always set Strict-Transport-Security \"max-age=31536000; includeSubDomains; preload\" env=HTTPS\n&lt;\/IfModule&gt;\n<\/code><\/pre>\n\n\n\n<p>Bu kod, yaln\u0131zca g\u00fcvenli (HTTPS) bir ba\u011flant\u0131 sa\u011fland\u0131\u011f\u0131nda HSTS ba\u015fl\u0131\u011f\u0131n\u0131 ziyaret\u00e7inin taray\u0131c\u0131s\u0131na enjekte eder.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"2_Nginx_Sunucularda_Kurulum\"><\/span>2. Nginx Sunucularda Kurulum<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p>Kurumsal projelerin vazge\u00e7ilmezi olan Nginx sunucusunda, yap\u0131land\u0131rma (genellikle <code>nginx.conf<\/code> veya site-available alt\u0131ndaki dosya) dosyan\u0131zdaki <code>server { ... }<\/code> blo\u011funun i\u00e7ine \u015fu sat\u0131r\u0131 eklemelisiniz:<\/p>\n\n\n\n<p>Nginx<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>add_header Strict-Transport-Security \"max-age=31536000; includeSubDomains; preload\" always;\n<\/code><\/pre>\n\n\n\n<p>De\u011fi\u015fikli\u011fi kaydettikten sonra <code>sudo systemctl restart nginx<\/code> komutuyla sunucuyu yeniden ba\u015flatarak ayarlar\u0131 ge\u00e7erli k\u0131labilirsiniz.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"3_WordPress_Kullanicilari_Icin_Kodsuz_Yontem\"><\/span>3. WordPress Kullan\u0131c\u0131lar\u0131 \u0130\u00e7in (Kodsuz Y\u00f6ntem)<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p>Kodlara m\u00fcdahale etmek istemeyen ki\u015fisel blog sahibi <strong>Kenan<\/strong>, HSTS i\u015flemini WordPress \u00fczerinden \u00e7\u00f6zmeyi tercih eder. Kenan, sistemine g\u00fcvendi\u011fi bir g\u00fcvenlik eklentisi (\u00d6rn: <em>Really Simple SSL<\/em> veya <em>Solid Security<\/em>) kurar. Eklenti ayarlar\u0131na girerek &#8220;Enable HSTS&#8221; (HSTS&#8217;yi Etkinle\u015ftir) kutucu\u011funu i\u015faretler. Eklenti, sunucunun yap\u0131land\u0131rma dosyalar\u0131na Kenan&#8217;\u0131n yerine gerekli kodlar\u0131 g\u00fcvenle yazar.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"4_CDN_Cloudflare_Uzerinden_HSTS_Aktiflestirme\"><\/span>4. CDN (Cloudflare) \u00dczerinden HSTS Aktifle\u015ftirme<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p>Sunucu taraf\u0131na hi\u00e7 dokunmadan, t\u00fcm trafi\u011finizi y\u00f6neten CDN \u00fczerinden de HSTS a\u00e7abilirsiniz. Cloudflare panelinize giri\u015f yap\u0131p, <strong>SSL\/TLS &gt; Edge Certificates<\/strong> men\u00fcs\u00fcne gidin. Sayfay\u0131 a\u015fa\u011f\u0131 kayd\u0131rarak <strong>&#8220;HTTP Strict Transport Security (HSTS)&#8221;<\/strong> b\u00f6l\u00fcm\u00fcn\u00fc bulun ve &#8220;Enable HSTS&#8221; butonuna t\u0131klayarak a\u00e7\u0131lan pencereden kural s\u00fcresini 12 ay olarak belirleyin.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Guvenligin_Zirvesi_HSTS_Preload_Onyukleme_Listesi_Nedir\"><\/span>G\u00fcvenli\u011fin Zirvesi: HSTS Preload (\u00d6ny\u00fckleme) Listesi Nedir?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>Yukar\u0131daki kurulumlar\u0131 yapt\u0131\u011f\u0131n\u0131zda sistem kusursuz \u00e7al\u0131\u015f\u0131r, <strong>ancak tek bir p\u00fcr\u00fcz vard\u0131r:<\/strong> HSTS ba\u015fl\u0131\u011f\u0131, kullan\u0131c\u0131 sitenize <em>ilk kez<\/em> girdi\u011finde taray\u0131c\u0131ya iletilir. Yani kullan\u0131c\u0131n\u0131n taray\u0131c\u0131s\u0131, HSTS kural\u0131n\u0131 \u00f6\u011frenmek i\u00e7in sitenizi hayat\u0131nda en az bir kere ziyaret etmi\u015f olmal\u0131d\u0131r. Peki kullan\u0131c\u0131 sitenize hayat\u0131nda ilk defa giriyorsa ve o esnada kafedeki tehlikeli a\u011fdaysa ne olacak?<\/p>\n\n\n\n<p>\u0130\u015fte bu &#8220;\u0130lk Ziyaret Zafiyetini&#8221; kapatmak i\u00e7in Google, <strong>HSTS Preload List<\/strong> (\u00d6ny\u00fckleme Listesi) ad\u0131nda k\u00fcresel bir veritaban\u0131 kurmu\u015ftur. T\u00fcm modern taray\u0131c\u0131lar (Chrome, Firefox, Safari, Edge) d\u00fcnyadaki devasa web sitelerinin bir listesini (Preload List) kendi kaynak kodlar\u0131na (yaz\u0131l\u0131m\u0131n i\u00e7ine) g\u00f6m\u00fcl\u00fc olarak bar\u0131nd\u0131r\u0131rlar. Taray\u0131c\u0131, listeye kay\u0131tl\u0131 bir siteye girerken sunucuya ba\u011flanmadan \u00f6nce bu listeye bakar; site listedeyse HSTS kural\u0131 an\u0131nda, siteye hi\u00e7 gidilmeden devreye girer.<\/p>\n\n\n\n<p>E-ticaret sitesi kurucusu <strong>Cansu<\/strong>, m\u00fc\u015fterilerinin kredi kart\u0131 g\u00fcvenli\u011fini zirveye ta\u015f\u0131mak i\u00e7in sitesini bu listeye eklemeye karar verir:<\/p>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li>Cansu, sunucusuna HSTS kodunu ekler ve i\u00e7ine mutlaka <code>preload<\/code> kelimesini dahil eder.<\/li>\n\n\n\n<li>Ard\u0131ndan <code>hstspreload.org<\/code> adresine giderek alan ad\u0131n\u0131 yazar ve analiz butonuna t\u0131klar.<\/li>\n\n\n\n<li>Kriterler kar\u015f\u0131land\u0131\u011f\u0131nda onay butonuna basar. Birka\u00e7 hafta i\u00e7inde Cansu&#8217;nun sitesi Google Chrome&#8217;un \u00e7ekirdek kodlar\u0131na yaz\u0131l\u0131r. Art\u0131k d\u00fcnyadaki herhangi bir insan Cansu&#8217;nun sitesine hayat\u0131nda ilk kez girse bile, taray\u0131c\u0131 g\u00fcvensiz ba\u011flant\u0131y\u0131 donan\u0131msal olarak reddedecektir.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Kurulumda_Dikkat_Edilmesi_Gereken_Olumcul_Riskler\"><\/span>Kurulumda Dikkat Edilmesi Gereken \u00d6l\u00fcmc\u00fcl Riskler<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>HSTS inan\u0131lmaz g\u00fc\u00e7l\u00fc bir kilit mekanizmas\u0131d\u0131r ve hatal\u0131 yap\u0131land\u0131r\u0131ld\u0131\u011f\u0131nda kendi sitenizi kendinize kapatman\u0131za neden olabilir. HSTS ba\u015fl\u0131\u011f\u0131n\u0131n \u015fakas\u0131 yoktur; taray\u0131c\u0131ya &#8220;Sertifikada en ufak bir sorun varsa siteyi engelle&#8221; der.<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Sertifika S\u00fcresinin Dolmas\u0131:<\/strong> HSTS aktif olan bir sitenin SSL sertifikas\u0131 sona ererse (expire olursa), taray\u0131c\u0131 ekrana devasa bir hata basar ve kullan\u0131c\u0131lar i\u00e7in standart uyar\u0131larda \u00e7\u0131kan <em>&#8220;Riskleri kabul et ve siteye ilerle&#8221;<\/em> butonu <strong>asla \u00e7\u0131kmaz.<\/strong> Siteniz sertifika yenilenene kadar tamamen eri\u015fime kapan\u0131r.<\/li>\n\n\n\n<li><strong>Test Etmeden Uzun S\u00fcre Vermeyin:<\/strong> HSTS&#8217;yi sunucunuza ilk ekledi\u011finizde <code>max-age<\/code> s\u00fcresini 1 y\u0131l (31536000) yapmak yerine, \u00f6nce 5 dakika (300 saniye) olarak ayarlay\u0131n (<code>max-age=300<\/code>). Sitenizin, alt alan adlar\u0131n\u0131z\u0131n (webmail vb.) d\u00fczg\u00fcn \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 kontrol edin. Her \u015feyin \u015fifreli (HTTPS) \u00e7al\u0131\u015ft\u0131\u011f\u0131ndan emin olduktan sonra s\u00fcreyi 1 y\u0131la \u00e7\u0131kar\u0131n. Geri d\u00f6n\u00fc\u015f\u00fc zor bir \u00f6nbellek (cache) i\u015flemidir.<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Sonuc_Gecilmez_Bir_Dijital_Kale_Insa_Etmek\"><\/span>Sonu\u00e7: Ge\u00e7ilmez Bir Dijital Kale \u0130n\u015fa Etmek<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p>2026 y\u0131l\u0131n\u0131n siber tehdit ortam\u0131nda, kullan\u0131c\u0131 verilerini korumak yaln\u0131zca hukuki bir zorunluluk (KVKK\/GDPR) de\u011fil, ayn\u0131 zamanda marka itibar\u0131n\u0131n temel ta\u015f\u0131d\u0131r. SSL sertifikas\u0131 kurup HTTPS&#8217;ye ge\u00e7mek evinize \u00e7elik bir kap\u0131 takt\u0131rmak gibidir; ancak HTTP&#8217;den HTTPS&#8217;ye yap\u0131lan s\u0131radan y\u00f6nlendirmeler, o kap\u0131n\u0131n kilidini birka\u00e7 saniyeli\u011fine a\u00e7\u0131k b\u0131rakmak anlam\u0131na gelir.<\/p>\n\n\n\n<p><strong>HSTS (HTTP Strict Transport Security)<\/strong>, o kilidin etraf\u0131na d\u00f6k\u00fclen betondur. Ziyaret\u00e7ilerinizi Man-in-the-Middle ve SSL Stripping sald\u0131r\u0131lar\u0131ndan mutlak bir g\u00fc\u00e7le korur, arama motorlar\u0131ndaki otoritenizi art\u0131r\u0131r ve sayfa a\u00e7\u0131l\u0131\u015f h\u0131zlar\u0131n\u0131 iyile\u015ftirerek ziyaret\u00e7i memnuniyetini zirveye ta\u015f\u0131r. Sitenizin altyap\u0131s\u0131nda uygun testleri yaparak HSTS kural\u0131n\u0131z\u0131 devreye al\u0131n ve dijital m\u00fclk\u00fcn\u00fcz\u00fc bilgisayar korsanlar\u0131 i\u00e7in a\u015f\u0131lamaz bir kaleye d\u00f6n\u00fc\u015ft\u00fcr\u00fcn.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Giri\u015f: SSL Sertifikas\u0131 Art\u0131k Tek Ba\u015f\u0131na Yeterli De\u011fil Dijital d\u00fcnyan\u0131n<a href=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/\">&#8230;<\/a><\/p>\n","protected":false},"author":6,"featured_media":23797,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[15],"tags":[],"class_list":["post-23796","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-genel"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v18.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/\" \/>\n<meta property=\"og:locale\" content=\"tr_TR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"HSTS (HTTP Strict Transport Security) Nedir? Neden Gerekli ve Nas\u0131l Kurulur? (2026 G\u00fcvenlik Rehberi) - Cenuta Blog\" \/>\n<meta property=\"og:description\" content=\"Giri\u015f: SSL Sertifikas\u0131 Art\u0131k Tek Ba\u015f\u0131na Yeterli De\u011fil Dijital d\u00fcnyan\u0131n...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/\" \/>\n<meta property=\"og:site_name\" content=\"Cenuta Blog\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/cenutacom\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-07T00:19:38+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-07T00:19:39+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.cenuta.com\/blog\/wp-content\/uploads\/2026\/08\/hsts.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1366\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cenutacom\" \/>\n<meta name=\"twitter:site\" content=\"@cenutacom\" \/>\n<meta name=\"twitter:label1\" content=\"Yazan:\" \/>\n\t<meta name=\"twitter:data1\" content=\"Baran O\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tahmini okuma s\u00fcresi\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 dakika\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.cenuta.com\/blog\/#organization\",\"name\":\"Cenuta Telekom\u00fcnikasyon Anonim \u015eirketi\",\"url\":\"https:\/\/www.cenuta.com\/blog\/\",\"sameAs\":[\"https:\/\/www.facebook.com\/cenutacom\",\"https:\/\/www.instagram.com\/cenutacom\/\",\"https:\/\/www.linkedin.com\/company\/cenuta\",\"https:\/\/www.youtube.com\/cenuta\",\"https:\/\/twitter.com\/cenutacom\"],\"logo\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.cenuta.com\/blog\/#logo\",\"inLanguage\":\"tr\",\"url\":\"https:\/\/www.cenuta.com\/blog\/wp-content\/uploads\/2020\/08\/logo_siyah.png\",\"contentUrl\":\"https:\/\/www.cenuta.com\/blog\/wp-content\/uploads\/2020\/08\/logo_siyah.png\",\"width\":805,\"height\":200,\"caption\":\"Cenuta Telekom\u00fcnikasyon Anonim \u015eirketi\"},\"image\":{\"@id\":\"https:\/\/www.cenuta.com\/blog\/#logo\"}},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.cenuta.com\/blog\/#website\",\"url\":\"https:\/\/www.cenuta.com\/blog\/\",\"name\":\"Cenuta Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/www.cenuta.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.cenuta.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"tr\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#primaryimage\",\"inLanguage\":\"tr\",\"url\":\"https:\/\/www.cenuta.com\/blog\/wp-content\/uploads\/2026\/08\/hsts.jpg\",\"contentUrl\":\"https:\/\/www.cenuta.com\/blog\/wp-content\/uploads\/2026\/08\/hsts.jpg\",\"width\":1366,\"height\":768},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#webpage\",\"url\":\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/\",\"name\":\"HSTS (HTTP Strict Transport Security) Nedir? Neden Gerekli ve Nas\u0131l Kurulur? (2026 G\u00fcvenlik Rehberi) - Cenuta Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.cenuta.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#primaryimage\"},\"datePublished\":\"2026-08-07T00:19:38+00:00\",\"dateModified\":\"2026-08-07T00:19:39+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#breadcrumb\"},\"inLanguage\":\"tr\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Ana sayfa\",\"item\":\"https:\/\/www.cenuta.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"HSTS (HTTP Strict Transport Security) Nedir? Neden Gerekli ve Nas\u0131l Kurulur? (2026 G\u00fcvenlik Rehberi)\"}]},{\"@type\":\"Article\",\"@id\":\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#webpage\"},\"author\":{\"@id\":\"https:\/\/www.cenuta.com\/blog\/#\/schema\/person\/0732262cd1d893b0f6ff806f442df9d5\"},\"headline\":\"HSTS (HTTP Strict Transport Security) Nedir? Neden Gerekli ve Nas\u0131l Kurulur? (2026 G\u00fcvenlik Rehberi)\",\"datePublished\":\"2026-08-07T00:19:38+00:00\",\"dateModified\":\"2026-08-07T00:19:39+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#webpage\"},\"wordCount\":1762,\"publisher\":{\"@id\":\"https:\/\/www.cenuta.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.cenuta.com\/blog\/wp-content\/uploads\/2026\/08\/hsts.jpg\",\"inLanguage\":\"tr\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.cenuta.com\/blog\/#\/schema\/person\/0732262cd1d893b0f6ff806f442df9d5\",\"name\":\"Baran O\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.cenuta.com\/blog\/#personlogo\",\"inLanguage\":\"tr\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1e4899262d57e005522a1b8ea0b9dea4?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1e4899262d57e005522a1b8ea0b9dea4?s=96&d=mm&r=g\",\"caption\":\"Baran O\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/","og_locale":"tr_TR","og_type":"article","og_title":"HSTS (HTTP Strict Transport Security) Nedir? Neden Gerekli ve Nas\u0131l Kurulur? (2026 G\u00fcvenlik Rehberi) - Cenuta Blog","og_description":"Giri\u015f: SSL Sertifikas\u0131 Art\u0131k Tek Ba\u015f\u0131na Yeterli De\u011fil Dijital d\u00fcnyan\u0131n...","og_url":"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/","og_site_name":"Cenuta Blog","article_publisher":"https:\/\/www.facebook.com\/cenutacom","article_published_time":"2026-08-07T00:19:38+00:00","article_modified_time":"2026-08-07T00:19:39+00:00","og_image":[{"width":1366,"height":768,"url":"https:\/\/www.cenuta.com\/blog\/wp-content\/uploads\/2026\/08\/hsts.jpg","type":"image\/jpeg"}],"twitter_card":"summary_large_image","twitter_creator":"@cenutacom","twitter_site":"@cenutacom","twitter_misc":{"Yazan:":"Baran O","Tahmini okuma s\u00fcresi":"9 dakika"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Organization","@id":"https:\/\/www.cenuta.com\/blog\/#organization","name":"Cenuta Telekom\u00fcnikasyon Anonim \u015eirketi","url":"https:\/\/www.cenuta.com\/blog\/","sameAs":["https:\/\/www.facebook.com\/cenutacom","https:\/\/www.instagram.com\/cenutacom\/","https:\/\/www.linkedin.com\/company\/cenuta","https:\/\/www.youtube.com\/cenuta","https:\/\/twitter.com\/cenutacom"],"logo":{"@type":"ImageObject","@id":"https:\/\/www.cenuta.com\/blog\/#logo","inLanguage":"tr","url":"https:\/\/www.cenuta.com\/blog\/wp-content\/uploads\/2020\/08\/logo_siyah.png","contentUrl":"https:\/\/www.cenuta.com\/blog\/wp-content\/uploads\/2020\/08\/logo_siyah.png","width":805,"height":200,"caption":"Cenuta Telekom\u00fcnikasyon Anonim \u015eirketi"},"image":{"@id":"https:\/\/www.cenuta.com\/blog\/#logo"}},{"@type":"WebSite","@id":"https:\/\/www.cenuta.com\/blog\/#website","url":"https:\/\/www.cenuta.com\/blog\/","name":"Cenuta Blog","description":"","publisher":{"@id":"https:\/\/www.cenuta.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.cenuta.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"tr"},{"@type":"ImageObject","@id":"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#primaryimage","inLanguage":"tr","url":"https:\/\/www.cenuta.com\/blog\/wp-content\/uploads\/2026\/08\/hsts.jpg","contentUrl":"https:\/\/www.cenuta.com\/blog\/wp-content\/uploads\/2026\/08\/hsts.jpg","width":1366,"height":768},{"@type":"WebPage","@id":"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#webpage","url":"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/","name":"HSTS (HTTP Strict Transport Security) Nedir? Neden Gerekli ve Nas\u0131l Kurulur? (2026 G\u00fcvenlik Rehberi) - Cenuta Blog","isPartOf":{"@id":"https:\/\/www.cenuta.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#primaryimage"},"datePublished":"2026-08-07T00:19:38+00:00","dateModified":"2026-08-07T00:19:39+00:00","breadcrumb":{"@id":"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#breadcrumb"},"inLanguage":"tr","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Ana sayfa","item":"https:\/\/www.cenuta.com\/blog\/"},{"@type":"ListItem","position":2,"name":"HSTS (HTTP Strict Transport Security) Nedir? Neden Gerekli ve Nas\u0131l Kurulur? (2026 G\u00fcvenlik Rehberi)"}]},{"@type":"Article","@id":"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#article","isPartOf":{"@id":"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#webpage"},"author":{"@id":"https:\/\/www.cenuta.com\/blog\/#\/schema\/person\/0732262cd1d893b0f6ff806f442df9d5"},"headline":"HSTS (HTTP Strict Transport Security) Nedir? Neden Gerekli ve Nas\u0131l Kurulur? (2026 G\u00fcvenlik Rehberi)","datePublished":"2026-08-07T00:19:38+00:00","dateModified":"2026-08-07T00:19:39+00:00","mainEntityOfPage":{"@id":"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#webpage"},"wordCount":1762,"publisher":{"@id":"https:\/\/www.cenuta.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.cenuta.com\/blog\/hsts-http-strict-transport-security-nedir-neden-gerekli-ve-nasil-kurulur-2026-guvenlik-rehberi\/#primaryimage"},"thumbnailUrl":"https:\/\/www.cenuta.com\/blog\/wp-content\/uploads\/2026\/08\/hsts.jpg","inLanguage":"tr"},{"@type":"Person","@id":"https:\/\/www.cenuta.com\/blog\/#\/schema\/person\/0732262cd1d893b0f6ff806f442df9d5","name":"Baran O","image":{"@type":"ImageObject","@id":"https:\/\/www.cenuta.com\/blog\/#personlogo","inLanguage":"tr","url":"https:\/\/secure.gravatar.com\/avatar\/1e4899262d57e005522a1b8ea0b9dea4?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1e4899262d57e005522a1b8ea0b9dea4?s=96&d=mm&r=g","caption":"Baran O"}}]}},"_links":{"self":[{"href":"https:\/\/www.cenuta.com\/blog\/wp-json\/wp\/v2\/posts\/23796","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cenuta.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cenuta.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cenuta.com\/blog\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cenuta.com\/blog\/wp-json\/wp\/v2\/comments?post=23796"}],"version-history":[{"count":1,"href":"https:\/\/www.cenuta.com\/blog\/wp-json\/wp\/v2\/posts\/23796\/revisions"}],"predecessor-version":[{"id":23798,"href":"https:\/\/www.cenuta.com\/blog\/wp-json\/wp\/v2\/posts\/23796\/revisions\/23798"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cenuta.com\/blog\/wp-json\/wp\/v2\/media\/23797"}],"wp:attachment":[{"href":"https:\/\/www.cenuta.com\/blog\/wp-json\/wp\/v2\/media?parent=23796"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cenuta.com\/blog\/wp-json\/wp\/v2\/categories?post=23796"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cenuta.com\/blog\/wp-json\/wp\/v2\/tags?post=23796"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}