Web Security · Middle · Question 72 of 75

What does adding a site to the HSTS preload list achieve?

1It caches the site's pages in the browser
✓Correct answer: Browsers use HTTPS for the domain even on the very first visit, before they've seen the HSTS header
3It makes the site load before other sites

Explanation

Preloading requires includeSubDomains and a long max-age. Removal is slow, so all subdomains must support HTTPS first.

Further reading

Test yourself

Take the Web Security · Middle quiz: questions and options are shuffled, and you get a review of your mistakes at the end.