Remove HSTS

Board for discussions around the Basilisk web browser.

Moderator: Basilisk-Dev

User avatar
Shadow
Apollo supporter
Apollo supporter
Posts: 42
Joined: 2023-03-16, 13:21

Remove HSTS

Unread post by Shadow » 2024-02-14, 14:47

Was reviewing my config entries and came across this security HSTS that got removed from the codebase.

Code: Select all

https://bugzilla.mozilla.org/show_bug.cgi?id=1424917
No expert but seems perhaps important or if not at least seems it needs removing.

Basilisk defaults:
security.mixed_content.use_hsts;false
security.mixed_content.send_hsts_priming;true

EDIT: I should have been more thorough. Seems JustOff had the same idea ages ago, and I presume the response still applies, so this topic can be deleted/locked.

https://repo.palemoon.org/MoonchildProductions/UXP/issues/384