5 ms·
Does anyone here know how (or if) each of the major browsers caps max age? It appears the specification provides a hint that it's up to UA whether to cap max a
by perpetualcrayon 9y ago
Does anyone here know how (or if) each of the major browsers caps max age? It appears the specification provides a hint that it's up to UA whether to cap max age.
If the browsers aren't capping max age, could this affect future owners of a domain had the HPKP max age been set to several years after their ownership of the domain expired?
- hdhzy 9y agoThey do cap: 10 weeks in Chrome, 60 days in Firefox [0] but you can still poison future owner's domain. [0]: https://mobile.twitter.com/spazef0rze/status/900698403629391877 https://mobile.twitter.com/spazef0rze/status/900698403629391...