as long as mint.com has HSTS and either the user has been there once before or it was hard coded into the browser as an HSTS domain then the browser will never

as long as mint.com has HSTS and either the user has been there once before or it was hard coded into the browser as an HSTS domain then the browser will never visit http://mint.com http://mint.com, it will immediately go to https://mint.com https://mint.com EDIT: and well it doesn't seem that mint.com even has HSTS enabled... so bad example :P