Comment Comment by bcrypt adblocked domains are indistinguishable from hsts blocked domains in terms of timing. so they show up as false positives. a clever attacker could subtract them out though. parent bcrypt 11 years ago