chromium/hstspreload.org

Removal based on domain expiry

strugee opened this issue · 1 comments

Currently the removal form requires HTTPS but this doesn't work so hot when the domain is expired. The requirement should probably have an exception in that case.

See:

If there is a secure, automated way to check for expired domains (at least for major TLDs), then we should be removing them automatically (#80). If there is a secure manual approach, the contact email should suffice.