> Without cert pinning In the case of Firefox connecting to addons.mozilla.org, ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		bzbarsky on Nov 26, 2014 \| parent \| context \| favorite \| on: Why HTTPS Everywhere isn't on addons.mozilla.org > Without cert pinning In the case of Firefox connecting to addons.mozilla.org, there is cert pinning.

bigiain on Nov 26, 2014 [–]

I didn't know that, thanks.

(In retrospect, it's such an obvious thing for them to do - I don't know why I didn't assume it was likely enough to be implemented and check before I posted that...)

bzbarsky on Nov 27, 2014 | [–]

To be fair, I _think_ the pinning was only added in Firefox 32, back in September. So it's a pretty recent development.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact