Reputation
Next privilege 125 Rep.
Vote down
Badges
2
Newest
 Supporter
Impact
0 people reached

  • 0 posts edited
  • 0 helpful flags
  • 9 votes cast
Oct
23
comment HSTS on sites available over HTTP and HTTPS
I have done precisely this for a site I built with a massive legacy browser usage that doesn't support key lengths of the one issued. As a workaround I loaded an empty file from /hsts as a script over a secure connection on the insecure page, to upgrade HTTP users (since the header would have been ignored otherwise). Legacy users simply fail to load the file over the new HTTPS
Mar
5
awarded  Supporter
Jan
17
awarded  Autobiographer
Jan
17
comment YouTube channel gone crazy!
You may also want to revoke any Apps you don't recognise accounts.google.com/b/0/IssuedAuthSubTokens