Re:HTTP Security Headers – A Complete Guide
by gorkish on Thursday July 18, 2019 @01:46PM
(#20472223)
Everything you said is true, but it does not provide any reasonable argument that HSTS as it is designed and implemented is a valid way to enforce this. The potential for malicious or accidental misuse to cause an effectively immediate and irreversible domain-wide DoS is simply too great. I am quite surprised that the feature made it through planning and implementation to begin with.
[ Parent
| on HN ]
There are no comments on this comment yet.