Re:Advice to avoid public Wi-Fi is mostly out of date
by eximius on Thursday January 30, 2020 @03:42PM
(#22195325)
Specifically preload or HSTS?
Because HSTS gets you most of the protection you need while being able to recover if something goes horribly wrong.
Set your HSTS timeout to greater than the gap between user visits and it does prevent active MitM.
You're only unprotected for first time visits being actively intercepted or particularly long gaps where HSTS can expire (both of which are hard targets).
Because HSTS gets you most of the protection you need while being able to recover if something goes horribly wrong.
Set your HSTS timeout to greater than the gap between user visits and it does prevent active MitM.
You're only unprotected for first time visits being actively intercepted or particularly long gaps where HSTS can expire (both of which are hard targets).