Hacker News new | ask | show | jobs
by mtoledo 4452 days ago
wondering the same thing. cperciva, care to elaborate? if you had https/hsts would the hashes be unnecessary?
1 comments

The hashes are there for convenience, not for security.