Hacker News new | ask | show | jobs
by duskwuff 1681 days ago
In modern browsers, google.com is in the HSTS preload list, so the browser won't even make an initial request over HTTP.
1 comments

Only www.google.com and other subdomains are preloaded unfortunately.. I’m having trouble quickly googling the reason (is that irony?) but from memory a Googler said that they had a lot of internal stuff hosted above google.com they couldn’t make https (HVAC controllers and such?)

You can see the full HSTS list here I believe: https://source.chromium.org/chromium/chromium/src/+/master:n...