3 ms·
But that doesn't help with mitm attacks at all. HSTS preloading is crude but probably the most pragmatic working solution.
by iforgotpassword 7y ago
But that doesn't help with mitm attacks at all. HSTS preloading is crude but probably the most pragmatic working solution.
- pzmarzly 7y agoIt helps with passive sniffing. But yeah, if attacker blocks HTTPS, then it's ineffective. I'm not dismissing HSTS, but rather suggesting to use both of these techniques (HSTS as site admin, Smart HTTPS as an user).