Hot answers tagged

15

No, HSTS does not protect against certificate misissuance. HSTS simply tells the browser to only allow connecting to that site over HTTPS, it doesn't have anything to do with checking whether the certificate should be trusted. There are two things that can help with misissuance to some extent, Certificate Transparency (CT) and Certificate Authority ...


Only top voted, non community-wiki answers of a minimum length are eligible