Timeline for Strict Transport Security -- max_age value
Current License: CC BY-SA 3.0
19 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Oct 7, 2021 at 7:18 | history | edited | CommunityBot |
replaced http://tools.ietf.org/html/draft with https://datatracker.ietf.org/doc/html/draft
|
|
| S Mar 16, 2012 at 1:25 | history | suggested | Andrei Botalov | CC BY-SA 3.0 |
Update to version 6 of draft
|
| Mar 15, 2012 at 22:54 | review | Suggested edits | |||
| S Mar 16, 2012 at 1:25 | |||||
| Aug 3, 2011 at 12:09 | vote | accept | Hubert Kario | ||
| Jul 26, 2011 at 14:45 | comment | added | Hubert Kario | that's true, haven't thought about this | |
| Jul 26, 2011 at 14:02 | comment | added | Jeff | @Hubert Kario:HSTS will only change links to the HSTS host domain. This is often not enough. | |
| Jul 26, 2011 at 11:07 | comment | added | Hubert Kario | by "bugs in redirection" I meant web application, not the browser. That is, the application by mistake puts http:// links in HTML | |
| Jul 26, 2011 at 7:06 | comment | added | Jeff | @Hubert Kario: The point was wade to state that if a cert has no warnings or errors (even if it is malicious) it's going to work against a user who is still within his/her HSTS time limit. Your question assumes something that is not true [which is closer to what pinning does]. And it absolutely does not protect against "bugs in redirection." | |
| Jul 26, 2011 at 0:05 | comment | added | Hubert Kario |
HSTS doesn't protect against rogue CAs, it protects against bugs in redirection, application and users ignorance as far as entering full https://... when going to a banking site. Cert pinning is something completely different
|
|
| Jul 24, 2011 at 22:54 | history | edited | Jeff | CC BY-SA 3.0 |
wording
|
| Jul 24, 2011 at 21:30 | history | edited | Jeff | CC BY-SA 3.0 |
more sure
|
| Jul 24, 2011 at 11:47 | history | edited | Jeff | CC BY-SA 3.0 |
anti showboating
|
| Jul 24, 2011 at 11:27 | history | edited | Jeff | CC BY-SA 3.0 |
question number
|
| Jul 24, 2011 at 11:20 | history | edited | Jeff | CC BY-SA 3.0 |
added more info
|
| Jul 24, 2011 at 9:07 | history | edited | Jeff | CC BY-SA 3.0 |
added example max-time
|
| Jul 24, 2011 at 8:43 | history | edited | Jeff | CC BY-SA 3.0 |
added info
|
| Jul 24, 2011 at 6:46 | history | edited | Jeff | CC BY-SA 3.0 |
grammar
|
| Jul 24, 2011 at 6:35 | history | edited | Jeff | CC BY-SA 3.0 |
typos
|
| Jul 24, 2011 at 6:29 | history | answered | Jeff | CC BY-SA 3.0 |