To be on the safe side, should consider getting your domain in the preload list [1]. AFAIK not all browsers will try http/443 if a person just types the domain

To be on the safe side, should consider getting your domain in the preload list [1]. AFAIK not all browsers will try http/443 if a person just types the domain name into the URL bar. Chrome does this. Firefox does not. Unsure about Edge. Your access logs on port 80 should help determine the risk. This is more important for sites that depend on radio/tv advertisement traffic. [1] - https://hstspreload.org/ https://hstspreload.org/