News for hackers. Stuff that matters.
Re:The Lines of Code That Changed Everything (2019) by default-kramer on Friday August 11, 2023 @02:09PM (#37091881)
Interesting stuff. Did HSTS seem out of place to anyone else? Not that it's not important, but compared to the rest of them, it hardly seems like it "changed everything." And from the gut, I'd guess that CORS has done more than HSTS to reduce harm on the internet.
Re:The Lines of Code That Changed Everything (2019) by dfern on Friday August 11, 2023 @02:48PM (#37092348)
Not to mention Let's Encrypt...
Re:The Lines of Code That Changed Everything (2019) by edgyquant on Friday August 11, 2023 @03:15PM (#37092682)
Let’s encrypt was a huge quality of life saver of working with certificates before. They fully automated the process for the most popular servers.
Re:The Lines of Code That Changed Everything (2019) by GuB-42 on Friday August 11, 2023 @04:07PM (#37093355)
Like most bits of code in the article, they are more like a symbol that represents something that "changed everything" rather than code that actually matters.

HSTS is not that important in itself, but it represents the general transition to "all https". Before that, https existed, but it was only used in select cases, like for entering your credit card number, early browsers even had a warning when https was enabled. Nowadays, https is the expected default, browsers are starting the throw a fit when they see plain http, and many tech-savvy users will go "Seriously, http? We are in the 21th century you know". More generally, the need for encryption-by-default also represents how the web is tied to the real world now. People use it to deal with real money, sign contracts, and exchange secrets that have real life consequences if they fall into the wrong hands.

The author picked a bit of code to represent that, and he chose the HSTS header. Debatable, but I think it is a good choice.