News for hackers. Stuff that matters.

A comment on Timing attack against HSTS to sniff browser history in Chrome and Firefox. Parent comment

Re:Timing attack against HSTS to sniff browser history in Ch... by AndyMcConachie on Tuesday October 27, 2015 @08:25AM (#10457528)
Or, if the site you're visiting is DNSSEC enabled, you could just look for a TLSA record. If the TLSA record is present, don't allow unencrypted connectivity.

That's probably how you could replace HSTS with DNS.

[ Parent | on HN ]
Re:Timing attack against HSTS to sniff browser history in Ch... by cbsmith on Tuesday October 27, 2015 @01:36PM (#10459678)
Even without DNSsec, HSTS could pretty much work as advertised.
[ Parent | on HN ]