4 ms·
Anyone can preload their domain in Chrome, Firefox and others that share the preload list. I'm not sure what vulnerabilities are left after your site has been p
by Avamander 8y ago
Anyone can preload their domain in Chrome, Firefox and others that share the preload list. I'm not sure what vulnerabilities are left after your site has been preloaded.
- deaps 8y agoThe only vulnerability left would be, as mentioned above, a client installing a browser that doesn't support HSTS.
- tedunangst 8y agoIf your attack relies on getting the user to install your own browser, don't waste your time with a simple HSTS bypass.