3 ms·
HSTS should never result in "none of the client ever able to access the site again".
by Buge 9y ago
HSTS should never result in "none of the client ever able to access the site again".
- lmm 9y agoHPKP can, if you pin a key and then lose the key you pinned.
- Buge 9y agoI know. But you shouldn't lump the dangerousness of HPKP on HSTS. Also with HPKP you shouldn't just pin one key. You should pin several keys you own as well as several root and intermediate keys. But I agree it's very difficult to do right and there's still a risk of it failing.