HSTS Preload
Get a domain into the browsers' HTTPS-only list
Browsers ship a list of domains they will only ever reach over HTTPS, from the very first request. This is where a domain is submitted and where its eligibility is checked. Note what it demands: with includeSubDomains, every subdomain has to answer over HTTPS too, www included.
LibreSoftware