<story><title>Bringing HSTS to www.google.com</title><url>https://security.googleblog.com/2016/07/bringing-hsts-to-wwwgooglecom.html</url></story><parent_chain><item><author>jc4p</author><text>This was my immediate first thought too. A lot of subway stations got WiFi in NYC and for the one directly underneath my office I always had to load Google first to get the login portal to load. Any other websites I visit (including this one) just displayed a HSTS error instead.</text></item><item><author>chinathrow</author><text>Doesn&amp;#x27;t that mean that wifi captive portals using www.google.com won&amp;#x27;t be able to take over the connection and re-direct to the captive portal?</text></item></parent_chain><comment><author>niftich</author><text>You can use &lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;example.com&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;example.com&lt;/a&gt; operated by the IANA, which is accessible though http and https.&lt;p&gt;Since an auto-upgrade to https would break a considerable number of examples, and there&amp;#x27;s no compelling business need on their part to promote https-only, it&amp;#x27;s much more likely to stay available through http than just about any other website run by commercial interests.</text></comment>
<story><title>Bringing HSTS to www.google.com</title><url>https://security.googleblog.com/2016/07/bringing-hsts-to-wwwgooglecom.html</url></story><parent_chain><item><author>jc4p</author><text>This was my immediate first thought too. A lot of subway stations got WiFi in NYC and for the one directly underneath my office I always had to load Google first to get the login portal to load. Any other websites I visit (including this one) just displayed a HSTS error instead.</text></item><item><author>chinathrow</author><text>Doesn&amp;#x27;t that mean that wifi captive portals using www.google.com won&amp;#x27;t be able to take over the connection and re-direct to the captive portal?</text></item></parent_chain><comment><author>AntiRush</author><text>&lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;http.rip&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;http.rip&lt;/a&gt; will always be http only; it&amp;#x27;s the domain I use for this purpose.</text></comment>