videomail.io:
> I mistakenly used this code for helmet, a npm package to set various
> HTTP headers:
>
> ```
> app.use(helmet.hsts({
> maxAge: 108864000000, // Must be at least 18 weeks to be approved by Google
> preload: true
> }))
> ```
>
> But now, I can't visit the local site with plain HTTP anymore. I need
> that for some tests.
tablotv.com:
> No one from our organization (we are small) added our domain to the list and
> according to the documentation on the HSTS preload site it may take many
> revisions to be removed from the list.
> ...
> As for how it happened, we are not sure.
involved-it.be:
> Several months ago I (accidently) added involved-it.be to the HSTS
> preload list presumably via https://hstspreload.appspot.com/.
bam.com.au: A mail subdomain hosted by a third-party does not support SSL.
logotype.se:
> The reason is that I do development, and for some subdomains I don't
> have TLS setup on the different server instances.
BUG=527947
TBR=palmer@chromium.org
Review URL: https://codereview.chromium.org/1814053002
Cr-Commit-Position: refs/heads/master@{#385850}
(cherry picked from commit 253102d2f4b59a803816d2567233a5823ab5d782)
Review URL: https://codereview.chromium.org/1868103002 .
Cr-Commit-Position: refs/branch-heads/2661@{#520}
Cr-Branched-From: ef6f6ae5e4c96622286b563658d5cd62a6cf1197-refs/heads/master@{#378081}