Re:Timing attack against HSTS to sniff browser history in Ch...
by bcrypt on Monday October 26, 2015 @11:37PM
(#10456155)
adblocked domains are indistinguishable from hsts blocked domains in terms of timing. so they show up as false positives. a clever attacker could subtract them out though.
[ Parent
| on HN ]
There are no comments on this comment yet.