Re: Mozilla's position on HPKP-RO storage

2014-08-29 Thread Ryan Sleevi
On Fri, August 29, 2014 8:43 am, Gervase Markham wrote: > On 28/08/14 17:20, Camilo Viecco wrote: > > 1. The PKP-RO header is not really useful, it might help on initial > > deployment of PKP but it cannot really be tested when it really matters > > most when you are actually changing certificates

Re: Mozilla's position on HPKP-RO storage

2014-08-29 Thread Gervase Markham
On 28/08/14 17:20, Camilo Viecco wrote: > 1. The PKP-RO header is not really useful, it might help on initial > deployment of PKP but it cannot really be tested when it really matters > most when you are actually changing certificates. Why not? Why would it not be possible to deploy a PKP-RO and t