News for hackers. Stuff that matters.

A comment on Kazakhstan to MitM all HTTPS traffic starting Jan 1. Parent comment

Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by tripzilch on Monday December 07, 2015 @11:25AM (#10690392)
You are right of course, but there are apparently a whole lot of people of the opinion that since Chrome was (one of the?) first apps implementing some sort of pinning, that this is de facto what certificate pinning "is".

I don't really agree with that, but it's IMO more useful to acknowledge the confusion, than having an argument about whether Chrome really does pinning or even gets to de facto define pinning or not, since this isn't even about Chrome :)

[ Parent | on HN ]
Re:Kazakhstan to MitM all HTTPS traffic starting Jan 1 by tremon on Wednesday December 09, 2015 @04:55AM (#10702802)
I get your point. The notion of designating a broken implementation as "the standard" makes me queasy, ever since IE6 happened.

But still, I would have much preferred if the GP would have started their comment with "yes, but" instead of "sorry, no". That would have made the distinction much clearer.

[ Parent | on HN ]