Hacker News Reader

Does that make Safari the last browser without a preload list for HSTS?

Have you looked at ~/Library/Cookies/HSTS.plist?

That list doesn’t seem to be preloaded. I checked mine and it only has 187 items in it. So I guess they store the preloaded list somewhere else.

Probably that they have a different organization than the preloaded list you find elsewhere.

When you delete that HSTS.plist and restart your Safari, the same file will pop up again, containing the same entries (if you haven't modified it before). So it is reasonable to assume that the list is preloaded rather than gradually built up.

The preload page says Safari uses Chrome's list too: https://hstspreload.appspot.com/

Reply on news.ycombinator.com