TLS is not strictly mandatory in HTTP&#x2F;2 (see h2c) but even if it was this list solves another problem - when user types e.g. Google.com in their browser the initial connection is made via HTTP. Preload list says &quot;if this domain is typed in address bar go straight to HTTPS, if that&#x27;s not possible stop the connection&quot;.