On 05.02.26 17:43, Yaron Sheffer wrote:

In addition, many of the attacks on HPKP were the result of it being at the application/HTTP layer and would not apply to a TLS-level mechanism.

Could you please share some authentic references for both claims? namely:

1. Attacks were really the result of being at application/HTTP layer
2. Attacks would really not have been possible at TLS-level mechanism

Thanks.

-Usama

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
TLS mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to