News for hackers. Stuff that matters.

A comment on Facebook has been paying people to install a “Research” VPN. Parent comment

Re:Facebook has been paying people to install a “Research” VPN by lol768 on Wednesday January 30, 2019 @04:25AM (#19033747)
I was under the impression Chrome was dropping HPKP support (it was deprecated in 2017), so I imagine this would be across all products - desktop and mobile.
[ Parent | on HN ]
Re:Facebook has been paying people to install a “Research” VPN by Leace on Wednesday January 30, 2019 @07:41AM (#19034576)
Chrome is dropping support for dynamic HPKP pins (pins that sites can add via headers) but not for static pins (Google domains etc.)

Source: https://bugs.chromium.org/p/chromium/issues/detail?id=779166

> OK, we're looking at removing dynamic PKP in M69. Static PKP will remain until further notice (we have no active plans to remove it right now).

[ Parent | on HN ]