bb88 raises a bad example. Not only is google protected by HSTS, but also most browsers ship with HSTS preload list that includes google. It is nearly impossibl

bb88 raises a bad example. Not only is google protected by HSTS, but also most browsers ship with HSTS preload list that includes google. It is nearly impossible to perform downgrade attacks on google domains.