Comment Comment by ianschmitz HSTS is a great mechanism to help protect against this. Although it assumes the user has visited the site previously within the HSTS expiration period. There’s also the HSTS preload list: https://hstspreload.org/ parent ianschmitz 2 years ago