gellerb
Joined 12 years ago
Karma
61
Submissions
18
Member since
Apr 24
Recent submissions
Comment · 9 years ago
One can use sourceclear.com for Composer.
Comment · 9 years ago
One can use sourceclear.com for Python support.
Comment · 11 years ago
Login and inspect the home page afterwards.
http://imgur.com/bwUHgcT
Comment · 11 years ago
SRI allows one to specify multiple hashes. In other words, to prevent this particular mismatch, one could include the hash of the new resource as well as the previous valid hash.
Comment · 11 years ago
Use Chrome Canary
Comment · 11 years ago
It unfortunately includes carrageenan.
Comment · 12 years ago
ssl:endpoint add-on
Comment · 12 years ago
The HTTP 2.0 spec[1] mentions "Implementations of HTTP/2 MUST support TLS 1.2 and it appears Chrome will implement HTTP/2 via TLS only (http://volgarev.me/blog/75094931827).
Comment · 12 years ago
Elastic Loading Balancing for AWS customers & Heroku allow for perfect forward secrecy and Akamai customers can expect ECDHE in Q3 of this year.
Comment · 12 years ago
ds9, yes, "site certs the browser doesn't trust a CA for" is more accurate. You can find the exact details of HSTS and self-signed certs in the draft in section 11.3[1]. I've updated the post to hopefully be more clear.
[1] http://tools.ietf.org/html/draft-ietf-websec-strict-transpor...