Right now, putting a site that sends the following header:

    Strict-Transport-Security: max-age=0; includeSubdomains; preload

into https://hstspreload.appspot.com/ results in:

    Sorry! Bad reply from server

We should show a helpful message.

Based on this report [1] by @fuglede on Twitter.

[1] https://twitter.com/fuglede/status/706220976112082945