Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

HPKP is dangerous. With configuration mistake or lost keys you can render the entire domain unusable. Imagine microsoft.com being lost for 10 years because someone put nonsense in HPKP. It's like nuclear reactor, except the advantage is pretty small and risk is huge.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: