4 ms·
No major browser redirects to HTTPS when the site is not on HSTS preload list AFAIK. I don’t have a PC with me, but at least Firefox for iOS doesn’t. But I've b
by pzmarzly 7y ago
No major browser redirects to HTTPS when the site is not on HSTS preload list AFAIK. I don’t have a PC with me, but at least Firefox for iOS doesn’t. But I've been using HTTPS everywhere for a while now, and still once in a while manage to find sites that have a correctly configured SSL certificate, but only serve the default "Apache has been installed" screen over the HTTPS, while serving the full site only over the HTTP. I guess if the behavior you described was the default in any browser, those sites would have got fixed already.
The extension is still worth running, though, as some sites I visit have a perfectly fine HTTPS version, but don’t redirect to it (some even serve HSTS header there).