Hacker News new | ask | show | jobs
by ktt 3866 days ago
TLS is not strictly mandatory in HTTP/2 (see h2c) but even if it was this list solves another problem - when user types e.g. Google.com in their browser the initial connection is made via HTTP. Preload list says "if this domain is typed in address bar go straight to HTTPS, if that's not possible stop the connection".