Hacker News new | past | comments | ask | show | jobs | submit login

Without key pinning, are threre other options for site operators to protect their users from MITM by traffic monitoring appliances?



HPKP doesn't protect against MITM via locally installed trust anchors. It explicitly permits that in both Chromium and Firefox.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: