3 ms·
They don't use reporting.
by huhtenberg 11y ago
They don't use reporting.
- Scott_Helme_ 11y agoNo, but that doesn't impact the operation of enforcing the use of their public keys which is the main purpose. It's definitely preferable to have reporting though.
- ptoomey3 11y agoWhen we first deployed our policy there was no support for reporting in browsers. I think that Firefox still lacks support and chrome only added support recently (I'd have to double check, or I'm sure Scott knows).
- Scott_Helme_ 11y agoExactly right. The only browser that will send HPKP reports right now is Chrome and that was very recent.