Submit adblockplus.org to be included in Chrome's HSTS preload list

[greiner]

Background

The Chrome team ​provides a form which allows domain owners to submit their sites for inclusion in a list that tells the browser that the site is HTTPS-only. According to them "Firefox and Safari also have a preloaded list which feeds from the Chrome list."

What to change

• All pages on adblockplus.org (including subdomains) have to use HTTPS for a successful inclusion so check whether there are any pages which are running on plain HTTP.
• If that is the case, make sure that they will also work fine when using HTTPS and make them use HTTPS after that.
• Modify the Strict-Transport-Security for any pages on adblockplus.org (including subdomains) to include includeSubDomains and preload tags and a max-age tag with a value larger than 10886399.
• Make sure that any redirects also include the Strict-Transport-Security header.
• Go to ​https://hstspreload.appspot.com/ and submit adblockplus.org for inclusion in the list.

[trev]

This is blocked by #51 - codereview.adblockplus.org is currently the only subdomain without HTTPS support. We cannot turn HTTPS on as long as we don't host it.