Re:HTTP Security Headers – A Complete Guide
by mtgx on Thursday July 18, 2019 @12:52PM
(#20471673)
> if for whatever reason you are no longer able to serve HTTPS traffic
Isn't that how it should work? Would you rather use Gmail over HTTP if its HTTPS stopped working? Besides, just supporting HTTP fallback means you're much more vulnerable to downgrade attacks -- it's the first thing attackers will attempt to use.
Isn't that how it should work? Would you rather use Gmail over HTTP if its HTTPS stopped working? Besides, just supporting HTTP fallback means you're much more vulnerable to downgrade attacks -- it's the first thing attackers will attempt to use.