2 ms·
Great point. Ideally it would also be possible to track which certificate was used last time and if the certificate has changed, verify somehow whether the chan
by resters 8y ago
Great point. Ideally it would also be possible to track which certificate was used last time and if the certificate has changed, verify somehow whether the change was intentional.
- predakanga 8y agoThis did exist in the form of HTTP Public Key Pinning (now deprecated). Unfortunately, the mechanism which replaced it (Expect-CT) can only help after the fact - someone would have to notice the extra issuance, and you would have no idea whether your traffic was affected.