Implement strict transport security
Luke Crouch commented
do you mean https for ALL traffic or all signed-in traffic?
I have opened a bug for this:
Hello Nils. Thanks as always for the report.
There is a conflicting suggestion that has gained some popularity (http://is.gd/xBZIL8), but I'll be sure to pass this on to the team regardless.