2 ms·
There is a header one can set, as an alternative to HPKP, that will merely notify you in the event of a misissuance, rather than block off your domain. Perhaps
by syrrim 9y ago
There is a header one can set, as an alternative to HPKP, that will merely notify you in the event of a misissuance, rather than block off your domain. Perhaps that would be preferable?
- schoen 9y agoYes, the notification mode would probably often be sufficient in many cases (and I think might be what caught the DigiNotar compromise?). I forgot what happens if an attacker tries to block the notification from going through, though.