3 ms·
Hsts solves sslstrip, I do not believe it enforces cert pinning. Iirc browsers deprecated cert pinning some time ago.
by hsbauauvhabzb 4y ago
Hsts solves sslstrip, I do not believe it enforces cert pinning. Iirc browsers deprecated cert pinning some time ago.
- shepherdjerred 4y agoI've seen HSTS not let me continue without the server having the expected certificate recently, so I think that's still a thing.
- mr_toad 4y agoThat might be because of certificate transparency rather than certificate pinning.