Nitpick: HSTS doesn't interfere with MITM. You're thinking of certificate pinnin... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		ameliaquining on Oct 14, 2023 \| parent \| context \| favorite \| on: Removal of Mazda Connected Services integration Nitpick: HSTS doesn't interfere with MITM. You're thinking of certificate pinning.

aneutron on Oct 14, 2023 | [–]

You are right, I was thinking of stapling but wrote HSTS. Thanks

LoganDark on Oct 18, 2023 | [–]

HSTS interferes with MITM when the mobile device in question doesn't allow you to install new certificate authorities (as is slowly becoming the case).

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact