3 ms·
> eventually, hopefully, I'll disallow websites that don't have HPKP with long expires I doubt HPKP will ever see wide adoption. At least not in the form it ha
by blfr 9y ago
> eventually, hopefully, I'll disallow websites that don't have HPKP with long expires
I doubt HPKP will ever see wide adoption. At least not in the form it has now. It's just too damn easy to bork the config and take your entire site offline with no way to remedy that error.
- 3pt14159 9y agoNot really. Just put a root level cert or two as your backups.