title: How to find if a web site uses HSTS
body: <p>I'm totally new to curl and am trying to ascertain if websites use Strict-Transport-Security.</p>
  
  <p>I'm running off advice. I've been told to check against <a href="http://src.chromium.org/viewvc/chrome/trunk/src/net/base/transport_security_state_static.json?view=markup" rel="noreferrer">Chrome's preloaded list</a> and to run </p>
  
  <pre><code>curl -D - https://www.example.com | head -n 20
  </code></pre>
  
  <p>to check for Strict-Transport-Security headers.</p>
  
  <p>But the 'head' command generated an error and was unknown.</p>
  
  <p>Any ideas? </p>
  
  <p>ATM I'm running Win XP, will have a linux distro in a few days.</p>
  
  <p>Thanks.</p>