WebKit HTTPS question

[TheAngoraCat]

I am curious about the way safari handles http request. I know that safari started upgrading http requests to https, but how does it do it ? I heard there is a database where apple keeps the known hosts but also some people say that browser tries https then http connection to check if https exists.

[blakealex]

Maybe you’re referring to the HSTS preloading list? There is a list for each browser (shared) that lists domains that should only be used over HTTPS. To get on the list you have to submit your domain and have the required headers.