News for hackers. Stuff that matters.
Re:Living with HTTPS by icebraining on Thursday July 19, 2012 @06:54PM (#4268484)
The whole point of tracking cookies is to maintain some identifier. With STS you only get 1 bit, how do you identify them? All users who have visited the site since (now - STS expiration length) look the same.
Re:Living with HTTPS by LeafStorm on Thursday July 19, 2012 @10:09PM (#4269041)
On the other hand, if the Chinese government finds out you have an HSTS flag for https://www.youversion.com/ or some such...