News for hackers. Stuff that matters.

A comment on Security advisory: Breach and Django. Parent comment

Re:Security advisory: Breach and Django by donaldstufft on Tuesday August 06, 2013 @12:23PM (#6167487)
@homakov, so you can get a browser to trust a cookie from a HTTP response under a domain protected by HSTS?
[ Parent | on HN ]
Re:Security advisory: Breach and Django by antihero on Wednesday August 07, 2013 @03:03AM (#6171284)
Doesn't HSTS just mean that the browser will just always make HTTPS responses?
[ Parent | on HN ]