> Some privacy-settings clean all states on exit, including cookes and > HSTS.
You have to make a trade-off here anyway. You can't have perfection at no costs. And if Eve controls the path between Adam and suckless it simply won't allow a redirection to https. There's no significant added security.
