3 ms·
CA's don't provide this security, but there's a new security mechanism called HTTP Strict Transport Security - [1] HSTS - which (along with some certificate pi
by michaelbuckbee 12y ago
CA's don't provide this security, but there's a new security mechanism called HTTP Strict Transport Security - [1] HSTS - which (along with some certificate pinning [2]) would.
1 - http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
2 - http://security.stackexchange.com/questions/29988/what-is-certificate-pinning http://security.stackexchange.com/questions/29988/what-is-ce...
- weddpros 12y agoI wasn't aware of it. Cert pinning is definitely a good solution!