December 17, 2019
HSTS For Forensics: You Can Run, But You Can't Use HTTP
First, for those of you who don't know, let me explain how HSTS works. HSTS is a HTTP header which a web server can send to tell a client that they should not accept unencrypted communications from that domain for a specified period of time. Developers can also preload their websites so that the...