News for hackers. Stuff that matters.

A comment on WordPress.com turns on HTTPS encryption for all websites. Parent comment

Re:WordPress.com turns on HTTPS encryption for all websites by XMPPwocky on Friday April 08, 2016 @07:33PM (#11458984)
But then, if I'm MITMing you, I can just silently keep you on www, without SSL, without caring about HSTS or anything.
[ Parent | on HN ]
Re:WordPress.com turns on HTTPS encryption for all websites by iancarroll on Friday April 08, 2016 @08:01PM (#11459100)
If WordPress enables (preloaded) HSTS, that would not matter.
[ Parent | on HN ]