4 ms·
The HSTS site you link to says: > Submissions to the preload list are not automatic nor assured. All submissions undergo a manual review that may take one to se
by throwaway7767 11y ago
The HSTS site you link to says:
> Submissions to the preload list are not automatic nor assured. All submissions undergo a manual review that may take one to several weeks.
It does not surprise me, bundling a list of all the sites wanting SSL-only with the browser can't possibly scale. I would expect that this is only possible for the most popular websites, that have enough clout to get included.
So for normal people, no, it sounds like it's not really possible to do this.
- ikeboy 11y agoYou can send the HSTS header, and the browser will refuse to connect over http again. Then you can only be downgraded the first time. The list is just for the first visits.
- kpcyrd 11y agoHere's the full list[0] of websites that qualified. I doubt it's that hard. It takes a while to get included, though. [0]: https://code.google.com/p/chromium/codesearch#chromium/src/net/http/transport_security_state_static.json https://code.google.com/p/chromium/codesearch#chromium/src/n...