2 ms·
When an HSTS locked site has an expired cert, the browser takes away the "it's okay" button.
by tedunangst 5y ago
When an HSTS locked site has an expired cert, the browser takes away the "it's okay" button.
- tptacek 5y agoNo, I get that. I get how you can reasonably argue about that feature. I don't get how you can argue that feature suggests we shouldn't stop SSL stripping at all.