This is surprising given that the .gov registrar is requiring HTTPS + HSTS for all new agency websites [1], but they specifically exclude existing domains or _r

This is surprising given that the .gov registrar is requiring HTTPS + HSTS for all new agency websites [1], but they specifically exclude existing domains or _renewals_. I wonder if 18f can help at all, it seems agencies must contact 18f themselves. 1: https://www.digitalgov.gov/2017/04/12/dotgov-domain-registration-program-to-provide-https-preloading-in-may/ https://www.digitalgov.gov/2017/04/12/dotgov-domain-registra...