Hacker News new | ask | show | jobs
by alphapapa 3506 days ago
Couldn't a MitM attack skip the redirect?
1 comments

Sure, although not in mainstream browsers if there's HSTS + HSTS preloading, which can be easily adopted by any site. Outside browsers, HSTS is usually not supported. It was actually implemented by wget, but without preloading, so it only works after first use which is much less useful.