My question is about Firefox and Chrome.
Is there a possibility to see which sites have set the HSTS flag in my browser?
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
chrome://net-internals/#hstsin the address bar of chrome
SiteSecurityServiceState.txt. This textfile contains sites that have enabled HSTS.
There is a Firefox plug-in called PinPatrol that lists all sites (preloaded and visited) known to have HSTS support.
This is a Firefox extension that shows in a readable format, the state of HSTS and HPKP domains stored by the browser. Firefox does not have a native way to show these domains or this functionality documented.