Hacker News new | ask | show | jobs
by RcouF1uZ4gsC 1506 days ago
This has enabled man in the middle attacks even for clients that want to upgrade protocols. An ISP or owner of the Wi-Fi network can just quietly drop all upgrade security headers.