News for hackers. Stuff that matters.

A comment on Comcast Shot Themselves in the Foot with MTA-STS. Parent comment

Re:Comcast Shot Themselves in the Foot with MTA-STS by tedunangst on Wednesday January 19, 2022 @11:50PM (#30004810)
When an HSTS locked site has an expired cert, the browser takes away the "it's okay" button.
[ Parent | on HN ]
Re:Comcast Shot Themselves in the Foot with MTA-STS by tptacek on Thursday January 20, 2022 @01:11AM (#30005384)
No, I get that. I get how you can reasonably argue about that feature. I don't get how you can argue that feature suggests we shouldn't stop SSL stripping at all.
[ Parent | on HN ]