4 ms·
> Most sites are not transacting currency or private information. > Almost all sites should be HTTP and HTTPS. This. Most people aren't even aware that Googl
by cnst 6y ago
> Most sites are not transacting currency or private information.
> Almost all sites should be HTTP and HTTPS.
This. Most people aren't even aware that Google.com is still both HTTP and HTTPS; you can easily test with curl or lynx to verify yourself. If your browser doesn't support HTTPS (e.g., maybe its blocked in your library or another free wifi), then Google.com would still work just fine. (Another question is that many other sites aren't as easily available, sadly.)
- account42 6y agoYet chrome doesn't let others on the HSTS preload list if you don't force all users onto HTTPS.