News for hackers. Stuff that matters.

A comment on “Users will only be able to view patents via HTTP. HTTPS will no longer work”. Parent comment

Re:“Users will only be able to view patents via HTTP. HTTPS ... by Edmond on Saturday April 22, 2017 @02:13PM (#14173823)
That should be considered a non-fun fact :)

They are basically going to be DOSing a huge segment of users who've previously had that header set on their browsers...they're also violating the OMB mandate that requires TLS for all government sites...it is a rather strange move, I can't imagine there is a good reason for it.

EDIT If it is for portal.uspto.gov then HSTS is a non-issue but still a very bad move.

[ Parent | on HN ]
Re:“Users will only be able to view patents via HTTP. HTTPS ... by javawizard on Saturday April 22, 2017 @08:55PM (#14175804)
> EDIT If it is for portal.uspto.gov then HSTS is a non-issue but still a very bad move.

Is it? I still see HSTS from portal.uspto.gov with the same age.

[ Parent | on HN ]