Yeah, that bugged the hell out of me as well. I'm not sure what the authors expect the iOS caching framework to do? It sounds like they would like to see a diff

Yeah, that bugged the hell out of me as well. I'm not sure what the authors expect the iOS caching framework to do? It sounds like they would like to see a different default, so that if someone does execute an HRH, it expires. That seems silly though. IMO, a "fix" means not allowing the HRH to occur in the first place, and the means used to accomplish the HRH is the MITM attack. No MITM, no HRH.