Mit „hsts“ getaggte Nachrichten

qbi Computer and Network Security

Ich lese die Einträge zu #HSTS und weine leise.
https://bugs.chromium.org/p/chromium/issues/detail?id=527947#c17
!security #tls

pztrn lnxw48

I'm not talking about CA system, which is obviously shitty and corruptioned. I'm talking about enforcing #HSTS (HTTP Scrict Transport Security) on application level, like enforcing it in PHP scripts (examples: GNU social, ownCloud). It forces …

pztrn windigo

It is not a point to enforce #HSTS on application level, anyway.

pztrn

What a fuck... Why do every script enforces #HSTS? What about if I want to install it somewhere on LAN with self-signed certificate??? Shouldn't HSTS be a WEBSERVER prerogative instead of application? >.< #killThoseBitches #mmnDontTakeItPersonally

pztrn Former Bob Jonkman -- Please use the new server at https://gs.jonkman.ca

Strange, because #curl says there is no #hsts header...