HSTS Studio
Guides
Practical, plain-English explainers to go with the tool.
What is HSTS? How the header forces HTTPS and closes the first-visit gap. The includeSubDomains trap How it can take down a forgotten subdomain. Removing from the preload list The slow removal process and the interim. Choosing a max-age Ramp from 300 to a year — and why it is hard to undo. HSTS vs HTTP→HTTPS redirect Why you need both, plus preload.