You are reading a single comment by @Velocio and its replies.
Click here to read the full conversation.
-
Ah, but HSTS is HTTP Strict Transport Security.
And in things like Chrome, we actually ship as a line hard-coded into Chrome to only ever access this site via HTTPS:
https://cs.chromium.org/chromium/src/net/http/transport_security_state_static.json?l=13230
I still use HTFU