@HarmSmitsDev @Scott_Helme Are there likely to be any devices that are sufficiently old and broken to encounter that *but* that are also sufficiently new that they'll honour a HSTS header and upgrade subsequent connections? If not, then they could at least enable HSTS so that newer stuff gets the benefit