News for hackers. Stuff that matters.

A comment on The Guardian has moved to HTTPS. Parent comment

Re:The Guardian has moved to HTTPS by witty_username on Tuesday November 29, 2016 @10:14AM (#13063482)
A Google search yields https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning
[ Parent | on HN ]
Re:The Guardian has moved to HTTPS by lexman0 on Tuesday November 29, 2016 @11:21AM (#13063979)
While HPKP looks good, I really wouldn't implement it. Too dangerous for big sites in it's current form.

Ivan puts it better than me: https://blog.qualys.com/ssllabs/2016/09/06/is-http-public-ke...

[ Parent | on HN ]
Re:The Guardian has moved to HTTPS by LeoPanthera on Tuesday November 29, 2016 @10:17AM (#13063499)
Looks good, but extremely limited browser support.
[ Parent | on HN ]
Re:The Guardian has moved to HTTPS by witty_username on Tuesday November 29, 2016 @10:33AM (#13063624)
Is Firefox and Chrome "extremely limited" support? Sure, it isn't supported by many browsers, but it isn't rare either.
[ Parent | on HN ]
Re:The Guardian has moved to HTTPS by LeoPanthera on Tuesday November 29, 2016 @07:02PM (#13067328)
The iPhone browser seems a major exemption.
[ Parent | on HN ]