3 ms·
I filed a Firefox bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1617987 https://bugzilla.mozilla.org/show_bug.cgi?id=1617987 Chrome has a heuristic they ca
by cpeterso 7y ago
I filed a Firefox bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1617987 https://bugzilla.mozilla.org/show_bug.cgi?id=1617987
Chrome has a heuristic they call SSLCommonNameMismatchHandling: if Chrome tries to connect to a site like "https://example.com" https://example.com" but the returned cert is for the "www." subdomain of the same domain, Chrome will silently redirect to "https://www.example.com" https://www.example.com".