News for hackers. Stuff that matters.
Re:If your site does not use HTTPS, Rostelecom will insert p... by mikecoles on Thursday July 07, 2022 @11:46AM (#32015534)
Even with HTTPS, are any pinning techniques still viable to warn users the traffic is being, possibly legitimately, MITM-ed?

HPKP was an option, but the footgun reason was given for dropping support. Has anything taken its place? Is there anyway to determine a MITM server-side without relying on x-forwarded-for or via headers?

There are no comments on this comment yet.