Comment by schoen | Hacker News Reader

Top New Best Ask Show Jobs

Comment by schoen | Hacker News Reader

Parent Full thread

The HPKP tracking problem is described in section 5

https://datatracker.ietf.org/doc/draft-ietf-websec-key-pinni...

which also includes another description of this HSTS problem.

We also have a pretty comprehensive discussion of this and many other vectors in:

http://www.chromium.org/Home/chromium-security/client-identi...

Thanks, I didn't know about that article.

See also the Firefox bug from 2011: https://bugzilla.mozilla.org/show_bug.cgi?id=648186

Reply on news.ycombinator.com