Redirect pitfalls with HTTP Strict Transport Security and some solutions

Posted by wglb on Monday December 27, 2010 @12:26PM
from the coderrr.wordpress.com dept.

( 2 comments | 11 points | on HN )

Re: Redirect pitfalls with HTTP Strict Transport Security an... by pilif on Monday December 27, 2010 @03:58PM (#2043640)

What bugs me is that whatever solution you'd want to use requires two SSL certificates and with that, at least two distinct IP addresses.

Especially the latter is concerning considering we are running out of addresses.

[ Parent | on HN ]

Re: Redirect pitfalls with HTTP Strict Transport Security an... by _pra on Monday December 27, 2010 @05:09PM (#2043806)

No, most CSAs these day will automatically add "www.yourdomain.com" to your certificate as a Subject Alternate Name.

[ Parent | on HN ]