4 ms·

I have Chromium set to delete browsing data on close. The HSTS Cookie survives that. Manually deleting browsing data kills it.

• spacefight 12y ago
  That would somehome indicate to me (without having looked at the code), that this has been implemented like this on purpose.
  • schoen 12y ago
    The basic background problem is that in the "normal" case, HSTS is a security and privacy protection rather than a tracking mechanism. That's why one would typically want it to persist as much as possible. But it has the potential for tracking effects too (as this project demonstrates). I guess the current browser behavior is indeed an attempt to project user intentions based on that.
    • spacefight 12y ago
      My point was the subtle difference between automated data clean at end of browsing session and the reported manual action. Nothing else.