North Korean infiltrator caught working in Amazon IT department thanks to lag — 110ms keystroke input raises red flags over true location [Updated]
www.tomshardware.com
A barely perceptible keystroke delay was the smoking gun that led to the uncovering of a malign imposter.
  • foobaz@lemmy.world
    English
    41·
    6 months ago

    I don’t think this is correct. HSTS only prevents downgrading.

    • ShellMonkey@piefed.socdojo.comEnglish
      2·
      6 months ago

      HSTS says it must be encrypted but a proxy will create two connections and look at it clear in the middle. On the other hand cert pinning says it must be a specific cert that breaks the site if decryption is used. Apple is big on doing that for a lot of their site and apps.