WebKit Blog company blog

Protecting Against HSTS Abuse

by @bfulgham webkit.org published 2018-03-165 min read

HTTP Strict Transport Security (HSTS) is a security standard that provides a mechanism for web sites to declare themselves accessible only via secure connections, and to tell web browsers where to go to get that secure version.

Points

191

HN comments

39

Submissions

1

Cited by

0 commenters

Web & FrontendSecurity & Privacy2018

Related posts from the same era

Slack’s new WYSIWYG input box is terrible

AArthur O'Dwyer20192,776 points1,077 comments details

A Conspiracy to Kill IE6

CChris Zacharias20192,195 points690 commentscited by 16 details

How Firefox Got Fast Again

MMozilla Hacks20172,180 points687 commentscited by 8 details

Firefox Send: Free encrypted file transfer service

Mozilla Blog20192,031 points512 comments details

Firefox is on a slippery slope

Drew DeVault20172,023 points874 commentscited by 3 details

Vulnerability in the Mac Zoom client allows malicious websites to enable camera

Jonathan Leitschuh20191,937 points456 commentscited by 15 details