News for hackers. Stuff that matters.

A comment on Redirect pitfalls with HTTP Strict Transport Security and some solutions.

Re: Redirect pitfalls with HTTP Strict Transport Security an... by pilif on Monday December 27, 2010 @03:58PM (#2043640)
What bugs me is that whatever solution you'd want to use requires two SSL certificates and with that, at least two distinct IP addresses.

Especially the latter is concerning considering we are running out of addresses.

[ Parent | on HN ]
Re: Redirect pitfalls with HTTP Strict Transport Security an... by _pra on Monday December 27, 2010 @05:09PM (#2043806)
No, most CSAs these day will automatically add "www.yourdomain.com" to your certificate as a Subject Alternate Name.
[ Parent | on HN ]