"Chrome will fall back to HTTP ... when there [is] ... DNS resolution failure" makes no sense to me. In what circumstance does DNS resolution succeed for HTTP after failing for HTTPS? DNS doesn't care what you're about to do with the IP address it provides.