News for hackers. Stuff that matters.

A comment on Why Chrome 53 Is Rejecting Chase Bank's Symantec Certificate. Parent comment

Re:Why Chrome 53 Is Rejecting Chase Bank's Symantec Certificate by paulddraper on Monday November 14, 2016 @11:46PM (#12955651)
Well I suppose curl/wget will never be RFC compliant user agents (curl -k, wget --no-check-certificate).

But somehow I think they'll still be used...

[ Parent | on HN ]
Re:Why Chrome 53 Is Rejecting Chase Bank's Symantec Certificate by aaronmdjones on Tuesday November 15, 2016 @04:45AM (#12956800)
wget writes a ~/.wget-hsts file with the HSTS information for any URI you have accessed that served an HSTS header.

Making it ignore --no-check-certificate if the file has an entry for the hostname you are visiting should be trivial, if it hasn't been done already.

[ Parent | on HN ]
Re:Why Chrome 53 Is Rejecting Chase Bank's Symantec Certificate by paulddraper on Tuesday November 15, 2016 @11:38AM (#12959559)
Exactly.
[ Parent | on HN ]