title: How to disable Chrome HSTS permanently for a subdomain
body: <p>I have following setup:</p>
  <p>The application <code>https://app.domain.de</code> is our production environment and is automatically forwarded to use HTTPS. All works fine here. On top, there are several development versions of the application for our QA-Team accessible via <code>http://develop.app.domain.de</code> (no HTTPS needed here).</p>
  <p>The problem begins here: As soon as I visit <code>https://app.domain.de</code> Chrome (and I guess also other browsers) forward <code>http://develop.app.domain.de</code> (no HTTPS) also to <code>https://develop.app.domain.de</code> (HTTPS). I can of course disable HSTS and clear the cache for this domain and <code>http://develop.app.domain.de</code> will work, but only until I visit <code>https://app.domain.de</code> again.</p>
  <p>I cannot enable HTTPS for our development environments as you need to have at least a Hobby Plan in Heroku to do so and that would therefore be a waste of money for all our development and test environments of the application. I would also like to keep the url schema.</p>
  <p>So my questions is how can I disable this nasty forwarding (HSTS) permanently?</p>