News for hackers. Stuff that matters.

A comment on Tell HN: Sci-Hub's TLS certificate has started failing. Parent comment

Re:Tell HN: Sci-Hub's TLS certificate has started failing by ceejayoz on Sunday April 29, 2018 @10:29AM (#16952145)
Chrome's already moving in this direction. Bypassing a HSTS error means you have to type "thisisunsafe", and they change the keyword sometimes (it used to be "badidea").
[ Parent | on HN ]
Re:Tell HN: Sci-Hub's TLS certificate has started failing by detaro on Sunday April 29, 2018 @10:35AM (#16952172)
Firefox makes working around HSTS even harder. But to be fair, HSTS is the domain owner explicitly declaring "do require a valid certificate here!".
[ Parent | on HN ]
Re:Tell HN: Sci-Hub's TLS certificate has started failing by fasj82 on Sunday April 29, 2018 @11:33AM (#16952426)
To disable HSTS permanently just do this: https://security.stackexchange.com/a/102315
[ Parent | on HN ]