Protecting Against HSTS Abuse
Why don't browsers just try https first? So if I type "example.com" into the box it tries https://example.com.Why is implementing HSTS and preserving the current behavior more useful?