Hacker News Reader

Goodbye, ssl stripping attacks, I'll miss you so much! We knew this day would come sooner or later

If https fails it will go back to http. There's no security advantage here. HSTS is still needed.

A protocol downgrade goes to http still, so MITM attacks could still happen :(