A security header being present is not the same as it being deployed well, and most HSTS deployments are weaker than they look.

Added to korrents 29 Jun 2026 · How quotes work · Something wrong? Tell us

Related korrents

Our reading — they may agree, disagree or merely touch the same thing. Closest first: a shared subject counts for most, then how near the wording is.

• Some domains cannot be launched into early: where security, partners and money movement are preconditions, you have to build first. PCPatrick Collison31 Jul 2026similar wording
• Much of the received wisdom about passwords has been reversed, yet organisations still apply yesterday’s patterns to today’s threats. THTroy Hunt26 Jul 2017similar wording
• The case for sweating every line of code was premised on humans doing the modifications, and it now survives only because tokens are scarce. DHDavid Heinemeier Hansson26 Aug 2026similar wording
• Users like security in the abstract and experience it as breakage: hardening the project made things slower, harder to update, and broke what people depended on. PSPeter Steinberger10 Aug 2026similar wording
• There will be some really bad security incidents this year, because people rushing to hand agents control of things like their email are not paying attention. MFMartin Fowler7 Apr 2026similar wording

On the map

Open the map on its own page →