5 ms·
In modern browsers, google.com is in the HSTS preload list, so the browser won't even make an initial request over HTTP.
by duskwuff 5y ago
In modern browsers, google.com is in the HSTS preload list, so the browser won't even make an initial request over HTTP.
- ehPReth 5y agoOnly www.google.com and other subdomains are preloaded unfortunately.. I’m having trouble quickly googling the reason (is that irony?) but from memory a Googler said that they had a lot of internal stuff hosted above google.com they couldn’t make https (HVAC controllers and such?) You can see the full HSTS list here I believe: https://source.chromium.org/chromium/chromium/src/+/master:net/http/transport_security_state_static.json https://source.chromium.org/chromium/chromium/src/+/master:n...