The Black and Decker story is from 2013. HSTS was rare back then. AFAICT the site didn't enable HSTS until late 2018: $ curl -Lis 'https://web.archive.org/w

The Black and Decker story is from 2013. HSTS was rare back then. AFAICT the site didn't enable HSTS until late 2018: $ curl -Lis 'https://web.archive.org/web/201810/https://www.blackanddecker.com/' | grep -i '^x-archive-orig-strict-transport-security:' [nothing] $ curl -Lis 'https://web.archive.org/web/201811/https://www.blackanddecker.com/' | grep -i '^x-archive-orig-strict-transport-security:' x-archive-orig-strict-transport-security: max-age=86400 ; includeSubDomains