Force TLS on all pages and subdomains, send the Strict Transport Security header, and preload your site (<a href="https:&#x2F;&#x2F;hstspreload.appspot.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;hstspreload.appspot.com&#x2F;</a>).