News for hackers. Stuff that matters.
Re:Security advisory: Breach and Django by homakov on Tuesday August 06, 2013 @12:16PM (#6167430)
> but off the cuff I believe HSTS will prevent the browser from trusting a plaintext HTTP response at all

Cookies are broken (i write about it on my blog like, daily). The essential idea of Forcing is injecting cookies into HTTPS space from HTTP.

There are no comments on this comment yet.