News for hackers. Stuff that matters.

A comment on Why HTTPS Everywhere isn't on addons.mozilla.org. Parent comment

Re:Why HTTPS Everywhere isn't on addons.mozilla.org by bzbarsky on Wednesday November 26, 2014 @11:03AM (#8662912)
> Without cert pinning

In the case of Firefox connecting to addons.mozilla.org, there is cert pinning.

[ Parent | on HN ]
Re:Why HTTPS Everywhere isn't on addons.mozilla.org by bigiain on Wednesday November 26, 2014 @05:38PM (#8664986)
I didn't know that, thanks.

(In retrospect, it's such an obvious thing for them to do - I don't know why I didn't assume it was likely enough to be implemented and check before I posted that...)

[ Parent | on HN ]
Re:Why HTTPS Everywhere isn't on addons.mozilla.org by bzbarsky on Thursday November 27, 2014 @01:32AM (#8666234)
To be fair, I _think_ the pinning was only added in Firefox 32, back in September. So it's a pretty recent development.
[ Parent | on HN ]