3 ms·
Chrome has certain google.com certificates (maybe all of them) pinned. {accounts, mail, docs}.google.com (at least) have HSTS forced and preloaded in Chrome, b
by harshreality 15y ago
Chrome has certain google.com certificates (maybe all of them) pinned.
{accounts, mail, docs}.google.com (at least) have HSTS forced and preloaded in Chrome, but www.google.com does not.
- cleverjake 15y agoI'd love to see where you found this information. I wasn't able to find it in Chrome's source, but I didn't have the change to do a deep dive.
- harshreality 14y agohttp://www.imperialviolet.org/2011/05/04/pinning.html http://www.imperialviolet.org/2011/05/04/pinning.html http://blog.chromium.org/2011/06/new-chromium-security-features-june.html http://blog.chromium.org/2011/06/new-chromium-security-featu... as well as empirical Chrome behavior.