[seisvelas]

Goodbye, ssl stripping attacks, I'll miss you so much! We knew this day would come sooner or later

[louis-lau]

If https fails it will go back to http. There's no security advantage here. HSTS is still needed.

[JayPeaEm]

A protocol downgrade goes to http still, so MITM attacks could still happen :(