title: How does Firefox implement HSTS in detail?
body: <p>I was doing some research on how Firefox and Chrome are implementing HSTS (HTTP Strict Transport Security) in detail.</p>
  
  <p>Turns out that they have a predefined list with some sites that already implement HSTS. This can be seen here <a href="https://src.chromium.org/viewvc/chrome/trunk/src/net/base/transport_security_state_static.json" rel="nofollow">here</a> and/or <a href="http://src.chromium.org/viewvc/chrome/trunk/src/net/base/transport_security_state.cc?revision=94091&amp;view=markup" rel="nofollow">here</a>.
  And these list seems to be somehow linked to the sourcecode itself which makes somehow sense...but how do Firefox and Chrome handle my own HSTS headers? How and where do they store my URL, my max-age and whether I includeSubDomains or not? 
  I wasn't able to find this in about:config or likewise....</p>
  
  <p>So maybe somebody knows more about this issue than me, I'm just curious (: 
  Thx!</p>