News for hackers. Stuff that matters.

A comment on Microsoft bakes a VPN into Edge and turns it on. Parent comment

Re:Microsoft bakes a VPN into Edge and turns it on by hsbauauvhabzb on Friday September 30, 2022 @05:34PM (#33041100)
Hsts solves sslstrip, I do not believe it enforces cert pinning. Iirc browsers deprecated cert pinning some time ago.
[ Parent | on HN ]
Re:Microsoft bakes a VPN into Edge and turns it on by shepherdjerred on Friday September 30, 2022 @05:55PM (#33041303)
I've seen HSTS not let me continue without the server having the expected certificate recently, so I think that's still a thing.
[ Parent | on HN ]
Re:Microsoft bakes a VPN into Edge and turns it on by mr_toad on Friday September 30, 2022 @09:16PM (#33042812)
That might be because of certificate transparency rather than certificate pinning.
[ Parent | on HN ]