HSTS is a sound idea on its own, but unfortunately it ignores the fact that people are idiots. I'm now sitting in front of a lab machine's management UI which somehow managed to end up with HSTS enabled despite having an ancient self-signed certifica...
