if (Request.IsSecureConnection) { Response.Headers.Add("Strict-Transport-Security", "max-age=31536000; includeSubDomains; preload"); }