Re: [websec] #57: Re-add an upper limit to max-age

2013-03-29 Thread Joseph Bonneau
Hopefully, it's not just Google that implements this. I guess any browser that implements this will have some kind of reset button (like they have for other stuff) that will erase all pins. So the site is not really bricked, but still it's pretty embarrassing to have to have a message on

Re: [websec] #57: Re-add an upper limit to max-age

2013-03-29 Thread Yoav Nir
On Mar 29, 2013, at 1:45 PM, Joseph Bonneau jbonn...@gmail.com wrote: Hopefully, it's not just Google that implements this. I guess any browser that implements this will have some kind of reset button (like they have for other stuff) that will erase all pins. So the site is not really

Re: [websec] #57: Re-add an upper limit to max-age

2013-03-29 Thread Yoav Nir
On Mar 29, 2013, at 5:15 PM, Ryan Sleevi sle...@google.com wrote: On Fri, Mar 29, 2013 at 10:45 AM, Joseph Bonneau jbonn...@gmail.com wrote: Hopefully, it's not just Google that implements this. I guess any browser that implements this will have some kind of reset button (like they have