Google Implements HSTS on Google.com Domain

[engine]

Google has turned on HTTP Strict Transport Security, HSTS, on google.com, as it continues to deploy the protocol, monitoring its own check-list to ensure an error-free roll-out.

It'll be extending this to other google domains in the coming months.

To further protect users, we've taken another step to strengthen how we use encryption for data in transit by implementing HTTP Strict Transport Security...Google Implements HSTS on Google.com Domain [security.googleblog.com]

[goodroi]

Seems like a smart move and sets a good example.