This is an annoying problem – even if your entire site uses HTTPS, users could be vulnerable if they ever follow an HTTP link or their br...
This is an annoying problem – even if your entire site uses HTTPS, users could be vulnerable if they ever follow an HTTP link or their browser's autocomplete doesn't update to use HTTPS. Strict Transport Security was designed to solve that problem partially by telling the browser to never make an insecure HTTP request: http://caniuse.com/#feat=stricttransportsecurity That's widely supported now but it does require your browser to have previously visited the legitimate site within the stored `max-age` period. Preloading ( https://hstspreload.appspot.com/ ) can close that further but increases the organizational commitment that your web developers will never break the all-HTTPS contract by mistake.
Posted by acdha on Sep 6, 2016, 3:56 PM
Tags
Related issues
- The biggest problem with having an LLM do this, from what I've observed of at least frontier models, is that the way they are trained...
- The biggest problem with MOND is that it was hand-crafted with additional parameters simply to fit the data.
- (My comment is about detached houses).
- The biggest problem with this is that I can't run my company's own internal benchmarks against this API, because they will be trained int...
- > steer Claude away from over-engineering parts of the system in response to hypothetical concerns.
- Why is there no comparison with FLUX 3 Image?
Raise real-world problems, find people facing the same issue, and discuss solutions.5,000 issues0 comments
hackernews (Other)
The biggest problem with having an LLM do this, from what I've observed of at least frontier models, is that the way they are trained...
NewThe biggest problem with MOND is that it was hand-crafted with additional parameters simply to fit the data.
(My comment is about detached houses).
The biggest problem with this is that I can't run my company's own internal benchmarks against this API, because they will be trained int...
> steer Claude away from over-engineering parts of the system in response to hypothetical concerns.
Why is there no comparison with FLUX 3 Image?
> our Git monorepo was developing an annoying problem Sentences like this are so common from people using monorepos that I am convinced ...
Why is there no contact form?
This is an annoying problem – even if your entire site uses HTTPS, users could be vulnerable if they ever follow an HTTP link or their br...
This is an annoying problem – even if your entire site uses HTTPS, users could be vulnerable if they ever follow an HTTP link or their browser's autocomplete doesn't update to use HTTPS. Strict Transport Security was designed to solve that problem partially by telling the browser to never make an insecure HTTP request: http://caniuse.com/#feat=stricttransportsecurity That's widely supported now but it does require your browser to have previously visited the legitimate site within the stored `max-age` period. Preloading ( https://hstspreload.appspot.com/ ) can close that further but increases the organizational commitment that your web developers will never break the all-HTTPS contract by mistake.
Comments (0)
No comments yet. Start the discussion.