News for hackers. Stuff that matters.

A comment on Hijack of Amazon’s domain service used to reroute web traffic for two hours. Parent comment

Re:Hijack of Amazon’s domain service used to reroute web tra... by rocqua on Tuesday April 24, 2018 @05:37PM (#16916854)
There might be a small preload list for HPKP. I'm pretty sure google uses key-pinning on their domains on chrome. Not sure if they use HPKP for that though.
[ Parent | on HN ]
Re:Hijack of Amazon’s domain service used to reroute web tra... by NickNameNick on Wednesday April 25, 2018 @08:30AM (#16920890)
I think chrome now ignores HPKP headers, and only respects the pre-load list. The risk of someone hijacking a domain, and inserting a malicious HKPK header had become too high.
[ Parent | on HN ]