You can also submit your site for inclusion on the HSTS preload lists: https://hstspreload.appspot.com/ https://hstspreload.appspot.com/ This fixes the remain

You can also submit your site for inclusion on the HSTS preload lists: https://hstspreload.appspot.com/ https://hstspreload.appspot.com/ This fixes the remaining hole of the first visit. However, one warning, if you like privacy, you should turn off HSTS or clear it on browser close at least. It's effectively a giant supercookie and it provides little security benefit over checking URLs for SSL yourself.