News for hackers. Stuff that matters.

A comment on Advice to avoid public Wi-Fi is mostly out of date. Parent comment

Re:Advice to avoid public Wi-Fi is mostly out of date by skrebbel on Thursday January 30, 2020 @10:49AM (#22192192)
> Unless there’s an attack on cert providers or someone adds a cert to your device.

How does HSTS help with that?

[ Parent | on HN ]
Re:Advice to avoid public Wi-Fi is mostly out of date by Filligree on Thursday January 30, 2020 @12:44PM (#22193409)
HSTS has a certificate pinning extension, but base HSTS wouldn't.
[ Parent | on HN ]
Re:Advice to avoid public Wi-Fi is mostly out of date by gruez on Thursday January 30, 2020 @01:13PM (#22193678)
>HSTS has a certificate pinning extension

You mean HPKP? AFAIK it isn't an extension, but rather another feature. Also, it's deprecated at this point.

[ Parent | on HN ]
Re:Advice to avoid public Wi-Fi is mostly out of date by fkfaduc on Thursday January 30, 2020 @02:52PM (#22194799)
Isn't certificate pinning deprecated for regular web traffic?
[ Parent | on HN ]