News for hackers. Stuff that matters.

A comment on Why Chrome 53 Is Rejecting Chase Bank's Symantec Certificate. Parent comment

Re:Why Chrome 53 Is Rejecting Chase Bank's Symantec Certificate by click170 on Monday November 14, 2016 @09:58PM (#12955272)
You can configure most major browsers to forget HSTS entries they already know about, so to the question of who owns your browser wrt honoring HSTS, I'd say it's the user.

http://classically.me/blogs/how-clear-hsts-settings-major-br...

Though now I'm curious if Chrome can be configured to forget HSTS for Google sites.

[ Parent | on HN ]
Re:Why Chrome 53 Is Rejecting Chase Bank's Symantec Certificate by snug on Monday November 14, 2016 @10:56PM (#12955477)
I'm not 100% certain, but is that to just delete the HSTS Header that is saved into the browser?
[ Parent | on HN ]