This is the correct answer. You'd be surprised how many programs rely on the remote server redirecting them to a secure server. Most major banks in Sweden had

This is the correct answer. You'd be surprised how many programs rely on the remote server redirecting them to a secure server. Most major banks in Sweden had http landing pages and did not use HSTS last time I checked (in 2017).