Don't recommend Public Key Pinning

Created on 11 December 2018, almost 6 years ago
Updated 22 July 2024, 4 months ago

hook_requirements currently has a recommendation to implement HTTP Public Key Pinning

- Pinning can be difficult to set up, with a possibility of locking users out of being able to access your site
- If not setup correctly with a backup key, browsers will ignore the HPKP header (since it's more likely a configuration problem will happen)
- Chrome intends to deprecate and remove Public Key Pinning (https://groups.google.com/a/chromium.org/forum/#!msg/blink-dev/he9tr7p3r...)

πŸ“Œ Task
Status

Fixed

Version

2.0

Component

Code

Created by

πŸ‡¨πŸ‡¦Canada gapple

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Production build 0.71.5 2024