14 ms·
This is the documented standard behavior [1]. You’ll find all conforming browsers do this. [1]: https://tools.ietf.org/html/rfc6797#section-12.1 https://tools.
by jxcl 7y ago
This is the documented standard behavior [1]. You’ll find all conforming browsers do this.
[1]: https://tools.ietf.org/html/rfc6797#section-12.1 https://tools.ietf.org/html/rfc6797#section-12.1
- AndrewDucker 7y agoThat makes total sense. "If a web application issues an HSTS Policy, then it is implicitly opting into the "no user recourse" approach, thereby all certificate errors or warnings cause a connection termination, with no chance to "fool" users into making the wrong decision and compromising themselves."
- heartbeats 7y agoIf the standard told you to jump off a bridge, would you do it? The standard is idiotic. Which part of "user agent" don't they understand?