You are a security engineer analyzing this app's network and wireless behavior during a traffic review.
Which answer accurately captures the purpose of the HSTS (HTTP Strict Transport Security) preload list on mobile browsers, and what attack does it prevent?
- A.The preload list applies to cellular connections alone and a Wi-Fi session falls back to the header-based policy (the browser consults the radio type before it reads the list); an SSL stripping attack on a hotspot always succeeds against a first visit: the protection reaches the mobile network path exclusively.
- B.The preload list is a desktop feature and neither iOS Safari nor Android Chrome consults it (the mobile builds ship without the compiled table); an SSL stripping attack on a handset always works against a first visit: the protection is unavailable on mobile.
- C.The HSTS preload list is a hardcoded list of domains (included in browsers like Chrome and Safari) that must always be contacted over HTTPS; it prevents SSL stripping attacks by ensuring the first-ever connection to a preloaded domain uses HTTPS without a prior plaintext HTTP request that could be intercepted.