You can configure most major browsers to forget HSTS entries they already know about, so to the question of who owns your browser wrt honoring HSTS, I'd say it'

You can configure most major browsers to forget HSTS entries they already know about, so to the question of who owns your browser wrt honoring HSTS, I'd say it's the user. http://classically.me/blogs/how-clear-hsts-settings-major-browsers http://classically.me/blogs/how-clear-hsts-settings-major-br... Though now I'm curious if Chrome can be configured to forget HSTS for Google sites.