3 ms·
Issues with HSTS is that it is opt in. It should be an opt out with a list of legacy sites that ships with the browsers similar to how hsts preloading works.
by adrr 6y ago
Issues with HSTS is that it is opt in. It should be an opt out with a list of legacy sites that ships with the browsers similar to how hsts preloading works.
- Polylactic_acid 6y agoThe option browser vendors are going with seems to be to make http show a full page warning about being insecure. No need to change HSTS now.