3 ms·
While I'd also like https as a default, that's not going to prevent this tracking if you still respect the intent of HSTS. If you try https first, and that fai
by bvttf 9y ago
While I'd also like https as a default, that's not going to prevent this tracking if you still respect the intent of HSTS.
If you try https first, and that fails, do you try again over http? Whether or not you'd fallback would leak the same information.