3 ms·

So all applications to the HSTS preloaded list are hardcoded in that json. How big will that file get in a few years? Looks like the first addition of user sub

So all applications to the HSTS preloaded list are hardcoded in that json. How big will that file get in a few years? Looks like the first addition of user submitted websites was done over a year ago. I wonder how ubiquitous HTTP/2 (TLS mandatory) will affect this.

ktt 11y ago
TLS is not strictly mandatory in HTTP/2 (see h2c) but even if it was this list solves another problem - when user types e.g. Google.com in their browser the initial connection is made via HTTP. Preload list says "if this domain is typed in address bar go straight to HTTPS, if that's not possible stop the connection".