preload

https://rsec.kr/?p=315

https://lesstif.gitbooks.io/web-service-hardening/content/ssl-tls-https.html