prefs.http_strict_transport_security

1 files changed, 9 insertions, 0 deletions

diff --git a/dillorc b/dillorc
index 18d52dd0..fb37a86f 100644
--- a/dillorc
+++ b/dillorc
@@ -189,6 +189,15 @@ search_url="Google http://www.google.com/search?ie=UTF-8&oe=UTF-8&q=%s"
 # page/image/stylesheet.
 #http_persistent_conns=NO
 
+# This mechanism allows servers to specify that they are only to be contacted
+# through HTTPS and not HTTP.
+#
+# On the whole, this is a valuable security measure against TLS stripping
+# attacks, etc., but in principle a site could contrive to use this as a
+# tracking mechanism. The term is "HSTS super cookie", although note that these
+* HSTS directives are not saved between browser sessions.
+#http_strict_transport_security=YES
+
 # Set the proxy information for http/https.
 # Note that the http_proxy environment variable overrides this setting.
 # WARNING: FTP and downloads plugins use wget. To use a proxy with them,