Description
Trust check: TLS certificate validity (chain + dates) and a http:// → https:// redirect — both needed for an agent to reach the service. Cert problems are a hard fail. HSTS (Strict-Transport-Security) is reported for context but not scored — it is a browser-only directive that non-browser agent clients do not honour.