3 ms·
They could but because of HSTS (https://blog.stackpath.com/glossary/hsts/ https://blog.stackpath.com/glossary/hsts/) which would largely mitigate it. They have
by derimagia 9y ago
They could but because of HSTS (https://blog.stackpath.com/glossary/hsts/ https://blog.stackpath.com/glossary/hsts/) which would largely mitigate it. They have a preload list in browsers too. But if a site wasn't using HSTS then yeah they could do that. I don't think that's better per-se.