5 ms·
Very true. HPKP is not part of this change, and if you look at GSA's guidance on HPKP, it's cognizant of this risk: https://https.cio.gov/certificates/#http-pu
by konklone 10y ago
Very true. HPKP is not part of this change, and if you look at GSA's guidance on HPKP, it's cognizant of this risk:
https://https.cio.gov/certificates/#http-public-key-pinning https://https.cio.gov/certificates/#http-public-key-pinning