That makes total sense. "If a web application issues an HSTS Policy, then it is implicitly opting into the "no user recourse" approach, thereby all certific

That makes total sense. "If a web application issues an HSTS Policy, then it is implicitly opting into the "no user recourse" approach, thereby all certificate errors or warnings cause a connection termination, with no chance to "fool" users into making the wrong decision and compromising themselves."