diff options
author | corvid <devnull@localhost> | 2015-07-03 00:40:45 +0000 |
---|---|---|
committer | corvid <devnull@localhost> | 2015-07-03 00:40:45 +0000 |
commit | 37deb338104c567d49813da18e1e0c340ba44378 (patch) | |
tree | aa8ea29cc953d0d3b983ae3ba8e440a8567eeb77 /dillorc | |
parent | 138d6ec7c901bbacf78e9fe831fb24ff3457ca2d (diff) |
hsts changelog
Diffstat (limited to 'dillorc')
-rw-r--r-- | dillorc | 2 |
1 files changed, 1 insertions, 1 deletions
@@ -192,7 +192,7 @@ search_url="Google http://www.google.com/search?ie=UTF-8&oe=UTF-8&q=%s" # This mechanism allows servers to specify that they are only to be contacted # through HTTPS and not HTTP. # -# On the whole, this is a valuable security measure against TLS stripping +# Overall, this is a valuable security measure against TLS stripping # attacks, etc., but in principle a site could contrive to use this as a # tracking mechanism. The term is "HSTS super cookie", although note that these * HSTS directives are not saved between browser sessions. |