News for hackers. Stuff that matters.
Re:Offshoring roulette: lessons from outsourcing (2016) by cpeterso on Wednesday February 26, 2020 @11:16AM (#22424305)
I filed a Firefox bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1617987

Chrome has a heuristic they call SSLCommonNameMismatchHandling: if Chrome tries to connect to a site like "https://example.com" but the returned cert is for the "www." subdomain of the same domain, Chrome will silently redirect to "https://www.example.com".

There are no comments on this comment yet.