HTTP Strict Transport Security (HSTS) forces browsers to connect using HTTPS only, mitigating:
b) Man-in-the-middle (MitM) attacks
HSTS helps prevent attackers from intercepting and tampering with the communication between the user's browser and the web server by ensuring that the connection is always encrypted via HTTPS.