Re:Chromium and Mozilla to enforce 1 year validity for TLS c...
by lukeschlather on Sunday June 28, 2020 @05:06PM
(#23672054)
You don't need to get the fingerprint through another channel. Getting the fingerprint through another channel prevents some classes of attacks. Blindly storing the first fingerprint offered also prevents a variety of attacks.
[ Parent
| on HN ]
There are no comments on this comment yet.