3 ms·
Hsts forces encryption, it has no impact on certificate invalidity, at least to my knowledge.
by hsbauauvhabzb 2y ago
Hsts forces encryption, it has no impact on certificate invalidity, at least to my knowledge.
- 0l 2y agoVisit your .internal site -> website uses TLS cert signed by root CA that is preloaded on your device. Succeeds and HSTS flag is set. Visit other .internal site -> uses TLS cert NOT signed by root CA that is preloaded on your device -> certificate error, and cannot be bypassed due to HSTS.