Preload HSTS for paypal.com.

net/http/transport_security_state_static.json

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file contains the HSTS preloaded list in a machine readable format.
 
 // The top-level element is a dictionary with two keys: "pinsets" maps details
 // of certificate pinning to a name and "entries" contains the HSTS details for
 // each host.
 //
@@ skipping 421 matching lines @@
     { "name": "google.uz", "include_subdomains": true, "pins": "google" },
     { "name": "google.vg", "include_subdomains": true, "pins": "google" },
     { "name": "google.vu", "include_subdomains": true, "pins": "google" },
     { "name": "google.ws", "include_subdomains": true, "pins": "google" },
     // Exclude the learn.doubleclick.net subdomain because it uses a different
     // CA.
     { "name": "learn.doubleclick.net", "include_subdomains": true },
 
     // Force HTTPS for sites that have requested it.
     { "name": "www.paypal.com", "mode": "force-https" },
+    { "name": "paypal.com", "mode": "force-https" },
     { "name": "www.elanex.biz", "mode": "force-https" },
     { "name": "jottit.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "sunshinepress.org", "include_subdomains": true, "mode": "force-https" },
     { "name": "www.noisebridge.net", "mode": "force-https" },
     { "name": "neg9.org", "mode": "force-https" },
     { "name": "riseup.net", "include_subdomains": true, "mode": "force-https" },
     { "name": "factor.cc", "mode": "force-https" },
     { "name": "members.mayfirst.org", "include_subdomains": true, "mode": "force-https" },
     { "name": "support.mayfirst.org", "include_subdomains": true, "mode": "force-https" },
     { "name": "id.mayfirst.org", "include_subdomains": true, "mode": "force-https" },
@@ skipping 153 matching lines @@
 
     // Entries that are only valid if the client supports SNI.
     { "name": "gmail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "googlemail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "www.gmail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "www.googlemail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "google-analytics.com", "include_subdomains": true, "pins": "google", "snionly": true },
     { "name": "googlegroups.com", "include_subdomains": true, "pins": "google", "snionly": true }
   ]
 }