Re: Redirects and HSTS from Anne van Kesteren on 2014-09-26 (public-webappsec@w3.org from September 2014)

From: Anne van Kesteren <annevk@annevk.nl>
Date: Fri, 26 Sep 2014 14:24:54 +0200
To: Mike West <mkwst@google.com>
Cc: WebAppSec WG <public-webappsec@w3.org>
Message-ID: <CADnb78jvMeR4QKSQXRAWiyx6yMBupSFjj-MV8OrcdO0RtjAMGg@mail.gmail.com>

On Fri, Sep 26, 2014 at 2:15 PM, Mike West <mkwst@google.com> wrote:
> Yes, I think that's true.

Perhaps Gecko's stance that HSTS rewriting happens after Mixed Content
is correct. At least for non-same-origin HSTS. :-(

(Sorry about the offlist reply.)


-- 
https://annevankesteren.nl/

Received on Friday, 26 September 2014 12:25:22 UTC