Doc updated per
<https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security>.
I was tipped off to the discrepancy when my site worked totally fine over
http, in spite of the claim, "This middleware makes a site functionally
inaccessible over vanilla http in all standard browsers."