3 ms·Canonical Redirect Pitfalls with HTTP Strict Transport Security (2010)8 points by diafygi 12y agojusob 12y agoIt looks like all the problems raised would be solved by using the option includeSubDomains in the HSTS header on paypal.com