News for hackers. Stuff that matters.

A comment on Login Forms Over HTTPS, Please. Parent comment

Re:Login Forms Over HTTPS, Please by mrfusion on Friday January 29, 2016 @11:07AM (#10995966)
So how do you avoid this?
[ Parent | on HN ]
Re:Login Forms Over HTTPS, Please by iancarroll on Friday January 29, 2016 @11:13AM (#10996011)
Force TLS on all pages and subdomains, send the Strict Transport Security header, and preload your site (https://hstspreload.appspot.com/).
[ Parent | on HN ]