Protecting Against HSTS Abuse
Why don't browsers just try https first? So if I type "example.com" into the box it tries <a href="https://example.com" rel="nofollow">https://example.com</a>.<p>Why is implementing HSTS and preserving the current behavior more useful?