2 ms·
I think many popular sites will be a false positive because some browsers ship with a list of HSTS domains.. visiting them in HTTP first wouldn't happen. https:
by woogley 11y ago
I think many popular sites will be a false positive because some browsers ship with a list of HSTS domains.. visiting them in HTTP first wouldn't happen. https://code.google.com/p/chromium/codesearch#chromium/src/net/http/transport_security_state_static.json https://code.google.com/p/chromium/codesearch#chromium/src/n...
- runesoerensen 11y agoPreloaded HSTS entries are filtered out https://github.com/diracdeltas/sniffly/blob/c645af76cb53a21a8eba449d766d25da18d3db54/util/process.py#L65 https://github.com/diracdeltas/sniffly/blob/c645af76cb53a21a...