[louis-lau]

If https fails it will go back to http. There's no security advantage here. HSTS is still needed.