News for hackers. Stuff that matters.
Re:Timing attack against HSTS to sniff browser history in Ch... by ejcx on Tuesday October 27, 2015 @02:22AM (#10456580)
like you said, the security considerations are mostly theoretical. It actually might seem basic turning it into a real attack but it requires a fair bit of work.

It is always my favorite section of the RFCs. Along with anywhere that says "The UA [MUST|MAY|...] \w+". Much fun to be had....

There are no comments on this comment yet.