3 ms·
There are motivating reasons for that[0]. The Expect-CT header is its replacement, and is getting picked up by recent versions of Chrome. [0]: https://scotthel
by ovao 8y ago
There are motivating reasons for that[0]. The Expect-CT header is its replacement, and is getting picked up by recent versions of Chrome.
[0]: https://scotthelme.co.uk/im-giving-up-on-hpkp/ https://scotthelme.co.uk/im-giving-up-on-hpkp/
- eganist 8y agoYep. I contributed rather substantially to one of those reasons with a talk on abuse cases for hpkp at defcon two years back. I'm still disappointed. I don't feel expect-ct effectively covers the same use cases.