4 ms·
A Google search yields https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning
by witty_username 10y ago
A Google search yields https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning
- LeoPanthera 10y agoLooks good, but extremely limited browser support.
- witty_username 10y agoIs Firefox and Chrome "extremely limited" support? Sure, it isn't supported by many browsers, but it isn't rare either.
- LeoPanthera 10y agoThe iPhone browser seems a major exemption.
- lexman0 10y agoWhile HPKP looks good, I really wouldn't implement it. Too dangerous for big sites in it's current form. Ivan puts it better than me: https://blog.qualys.com/ssllabs/2016/09/06/is-http-public-key-pinning-dead https://blog.qualys.com/ssllabs/2016/09/06/is-http-public-ke...