News for hackers. Stuff that matters.

A comment on Thai government to MITM all internet communications. Parent comment

Re:Thai government to MITM all internet communications by gruez on Monday May 30, 2016 @02:28PM (#11802442)
The point of HSTS (and preloading) is to protect clients from sslstrip (and similar attacks). as in, client types in a http url, and the attacker prevents the http connection from being upgraded.
[ Parent | on HN ]
Re:Thai government to MITM all internet communications by pcl on Monday May 30, 2016 @03:01PM (#11802558)
That's one of the goals of HSTS itself, but preloading designed to allow secure-only communications when establishing a connection to a hitherto-unused site, so that MITM attacks can't simply provide their own certs on first connect.
[ Parent | on HN ]