Re:What You Need to Know about HTTP Public Key Pinning (HPKP)
by pfg on Sunday February 07, 2016 @11:35PM
(#11056344)
Firefox defaults to the same implementation[1].
I'm personally fine with this. MITM proxies are a valid use case. I do think that all parties should be made aware of it, but that's probably something that has to be fixed via laws (I think some European countries forbid this practice unless it's been made clear that there can be no expectation of privacy on a company-provided device).
I'm personally fine with this. MITM proxies are a valid use case. I do think that all parties should be made aware of it, but that's probably something that has to be fixed via laws (I think some European countries forbid this practice unless it's been made clear that there can be no expectation of privacy on a company-provided device).
[1]: https://wiki.mozilla.org/SecurityEngineering/Public_Key_Pinn...