3 ms·
With HSTS and preload it should mitigate the vulnerability.
by kenniskrag 6y ago
With HSTS and preload it should mitigate the vulnerability.
- adrr 6y agoIssues with HSTS is that it is opt in. It should be an opt out with a list of legacy sites that ships with the browsers similar to how hsts preloading works.
- Polylactic_acid 6y agoThe option browser vendors are going with seems to be to make http show a full page warning about being insecure. No need to change HSTS now.