About this document
Understanding HTTPS and HSTS Challenges by Justin Pierce is a document available to read on EtoBox.
The document summarizes challenges with HTTPS security and proposed solutions. Strict Transport Security (STS) allows websites to opt-in to only allowing HTTPS connections, redirecting all HTTP traffic. However, STS has limitations including no way to undo it and not protecting first visits. HSTS preloading bakes trusted HTTPS sites into browsers but creates an operational nightmare to maintain. Public key pinning allows sites to specify allowed certificate keys but is difficult to enforce and raises new ch
- Author
- Justin Pierce
- Language
- EN