Hacker News Reader

What about a route that gets hijacked? There is no HSTS for IP addresses.

Presumably the route hijacker wouldn't have a valid private key for the certificate so they wouldn't pass validation