News for hackers. Stuff that matters.

A comment on HTTP Strict Transport Security (HSTS). Parent comment

Re:HTTP Strict Transport Security (HSTS) by AlotOfReading on Tuesday December 30, 2025 @10:10PM (#46440858)
The number of MITM attacks that's thwarted for me remains zero, while sites forgetting to renew their certs despite setting HSTS is a fairly regular occurrence.
[ Parent | on HN ]
Re:HTTP Strict Transport Security (HSTS) by zeeZ on Wednesday December 31, 2025 @07:38AM (#46443614)
Not being able to access the web interface where you have to manually upload a new certificate due to HSTS and the old certificate having expired a couple hours ago...
[ Parent | on HN ]
Re:HTTP Strict Transport Security (HSTS) by kiririn on Wednesday December 31, 2025 @12:33PM (#46446256)
Yeah it’s more of an annoyance for sure. I only discovered it was a thing when intentionally MITMing a domain on my router
[ Parent | on HN ]