4 ms·

It seems only the 'https' site is gone, the 'http' site is still around[0]. [0] http://bugmenot.com/view/news.ycombinator.com http://bugmenot.com/view/news.yco

• scrapcode 4y ago
  Not working for me ~8 minutes later.
  • superkuh 4y ago
    It's probably your browser trying to protect you from yourself, re: HTTPS. It works in non-user hostile browsers.
    • sph 4y ago
      Which browser from this decade ignores HSTS completely?
      • stuartd 4y ago
        Safari on iPadOS 16 loads that just fine for me. I’d forgotten all about this site, don’t remember ever using it but I certainly heard of it.
        • stuartd 4y ago
          Haven’t managed to find a site (apart from HN) that it does allow yet!
      • autoexec 4y ago
        It works for me in firefox, but I've got it locked down pretty hard. I have the following all set to false in about:config network.stricttransportsecurity.preloadlist dom.security.https_first dom.security.https_first_pbm browser.fixup.fallback-to-https
      • neurostimulant 4y ago
        Chrome can actually bypass HSTS if you enter the super secret code in the security warning screen. The code is changed regularly though, you'll have to check chromium source code to get the current bypass code. (e.g. https://chromium.googlesource.com/chromium/src/+/refs/tags/110.0.5422.1/components/security_interstitials/core/browser/resources/interstitial_large.js https://chromium.googlesource.com/chromium/src/+/refs/tags/1... ) Very useful for testing but don't make a habit to use it on some random websites.