HSTS vs HTTP 301 redirect

To my understanding they do the same thing but work differently, please correct me if I am wrong.

`HSTS` \- user visits http://www.mysite.com, the website will automatically force the user to go to [https://www.mysite.com](https://www.mysite.com). The user never sees the unsecure http version.

​

`301 redirect` \- user visits [https://www.mysite.com](https://www.mysite.com). They ***DO*** establish a connection to the unsecured site, but then redirected to [https://www.mysite.com](https://www.mysite.com).

​

301 redirect is good, but for that split second a MITM attack can happen correct?

cybersecurity hsts http vs