Advice to avoid public Wi-Fi is mostly out of date

Re:Advice to avoid public Wi-Fi is mostly out of date by rovr138 on Thursday January 30, 2020 @10:34AM (#22192028)

You could be.

If you are, you’ll get a message that the very isn’t valid.

Unless there’s an attack on cert providers or someone adds a cert to your device.

The cert approach can be seen in some corporate environments.

[ Parent | on HN ]

Re:Advice to avoid public Wi-Fi is mostly out of date by skrebbel on Thursday January 30, 2020 @10:49AM (#22192192)

> Unless there’s an attack on cert providers or someone adds a cert to your device.

How does HSTS help with that?

[ Parent | on HN ]

Re:Advice to avoid public Wi-Fi is mostly out of date by Filligree on Thursday January 30, 2020 @12:44PM (#22193409)

HSTS has a certificate pinning extension, but base HSTS wouldn't.

[ Parent | on HN ]

Re:Advice to avoid public Wi-Fi is mostly out of date by gruez on Thursday January 30, 2020 @01:13PM (#22193678)

>HSTS has a certificate pinning extension

You mean HPKP? AFAIK it isn't an extension, but rather another feature. Also, it's deprecated at this point.

[ Parent | on HN ]

Re:Advice to avoid public Wi-Fi is mostly out of date by fkfaduc on Thursday January 30, 2020 @02:52PM (#22194799)

Isn't certificate pinning deprecated for regular web traffic?

[ Parent | on HN ]