News for hackers. Stuff that matters.

A comment on HTTPS Everywhere will sunset in January 2023. Parent comment

Re:HTTPS Everywhere will sunset in January 2023 by necovek on Wednesday May 25, 2022 @08:56PM (#31512949)
What happens if your browser (eg. new device, another browser, first visit) does not have a record of HSTS data for a domain, and you visit it by going to HTTP on an insecure network?

Can't they similarly serve HTTP data without any HSTS headers? Or do browsers also check HTTPS for any HSTS headers on the same IP and cross-compare?

[ Parent | on HN ]

There are no comments on this comment yet.