Comment on Automatic HTTPS Enforcement for New Executive Branch .gov DomainsparentComments−konkloneOP9yVery true. HPKP is not part of this change, and if you look at GSA's guidance on HPKP, it's cognizant of this risk:https://https.cio.gov/certificates/#http-public-key-pinning
Comments
Very true. HPKP is not part of this change, and if you look at GSA's guidance on HPKP, it's cognizant of this risk:
https://https.cio.gov/certificates/#http-public-key-pinning