[tedunangst]

If your attack relies on getting the user to install your own browser, don't waste your time with a simple HSTS bypass.