"The best solution is to preload HSTS on a domain and include all subdomains" That's the great thing about HTTPS/SSL security. Every attack, every vulnerabilit

"The best solution is to preload HSTS on a domain and include all subdomains" That's the great thing about HTTPS/SSL security. Every attack, every vulnerability, every problem with performance is met with "just make sure your server enables XYZ and blah blah blah is updated and make sure the clients are only connecting from chrome while standing on one leg and singing the national anthem while looking at a picture of the Pope. So yeah, it's actually really secure. When are we going to accept that it's a fool's errand. SSL is a hopeless case and design something better for today's world?