Changes to the HTTPs headers
Florent Daigniere <[email protected]>
| Newsgroups | gmane.network.freenet.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi, Since we will be moving away from hosting our own website, I have changed the max-age value of both "Public-Key-Pins" and "Must-Staple" to zero... from 182 days. I have left the "Strict-Transport-Security" one as is. Obviously this is not perfect, and browsers that don't visit our website in between now and when we switch will display a permanent, non-user dismissable, security error (unless the switch happens after 182 days OR we configure the same SSL certificate wherever the new website will be hosted). Florent _______________________________________________ Devl mailing list [email protected] https://emu.freenetproject.org/cgi-bin/mailman/listinfo/devl
signature.asc
(application/pgp-signature, 473 B)
-----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQEcBAABCAAGBQJXtvyYAAoJEOrF6/B6qcKjPo8H+wdXrWDyl0TlNlEGcU5rXBqf Mck6tKNsqUdmnDzxnzcN2at+n8c6Hb22MQgvpIHQZmN33Bt9a/mwwpOW5oJqs5CM tjxi6dZf1octJajS87o9/WEkRXneWB3x/McUNMXnD7vHpYbse1NFZxFx08UPte29 7+PDiLE6kM+2wj61nv93pEKMH1DuyqpYkKYRh3zr1joNaXtclCxzdOvEvL4lWDM9 hZSIGE+QZXx3/XN0XIc5Y+77G/WmaKkLpyqh34pMtOGyB0dXGn/m07kjlddXazyA 0pzV9mftrwUVl8qrtIlIH9WFKQyj9dcU11bvtpFwSWiUVknkMov2D4PDINvTyRA= =NNzK -----END PGP SIGNATURE-----