3 ms·
That would somehome indicate to me (without having looked at the code), that this has been implemented like this on purpose.
by spacefight 12y ago
That would somehome indicate to me (without having looked at the code), that this has been implemented like this on purpose.
- schoen 12y agoThe basic background problem is that in the "normal" case, HSTS is a security and privacy protection rather than a tracking mechanism. That's why one would typically want it to persist as much as possible. But it has the potential for tracking effects too (as this project demonstrates). I guess the current browser behavior is indeed an attempt to project user intentions based on that.
- spacefight 12y agoMy point was the subtle difference between automated data clean at end of browsing session and the reported manual action. Nothing else.