Hacker News Reader

Chrome's already moving in this direction. Bypassing a HSTS error means you have to type "thisisunsafe", and they change the keyword sometimes (it used to be "badidea").

View on HN

Firefox makes working around HSTS even harder. But to be fair, HSTS is the domain owner explicitly declaring "do require a valid certificate here!".

To disable HSTS permanently just do this: https://security.stackexchange.com/a/102315

Reply on news.ycombinator.com