2 ms·
So scope cookies to the SSL certificate instead of the domain name, or simply offer to clear them for a domain whenever you bypass the HSTS on one.
by saurik 4y ago
So scope cookies to the SSL certificate instead of the domain name, or simply offer to clear them for a domain whenever you bypass the HSTS on one.
- duskwuff 4y ago> So scope cookies to the SSL certificate And invalidate every user's session whenever the server's certificate is renewed??