Status icon indicating copy to clipboard operation
Status copied to clipboard

HPKP - Public Key Pinning id points to the wrong entry in chrome status

Open martinsuchan opened this issue 9 years ago • 4 comments

This page shows that HTTP Public Key Pinning (HPKP) is not supported in Firefox.

It works in Firefox since v35. http://caniuse.com/#feat=publickeypinning https://developer.mozilla.org/en/docs/Web/Security/Public_Key_Pinning

martinsuchan avatar Sep 01 '16 18:09 martinsuchan

The status is fetched from https://www.chromestatus.com/features/4669935557017600. It needs to be updated by Chromium team on their side. You need to file a bug on chromium-dashboard.

ghost avatar Sep 02 '16 01:09 ghost

@nextPrime the chromium-dashboard status you linked is about the HPKP reporting feature, not about HPKP itself.

stof avatar Sep 14 '16 08:09 stof

@stof You're right. I didn't notice that. So https://github.com/MicrosoftEdge/Status/blob/production/status.json#L4182 should be changed. Another thing is since Firefox supports HPKP blocking but not reporting, should the status page reports HPKP is supported or not supported in Firefox? Unfortunately Edge status page doesn't indicate partial support.

ghost avatar Sep 15 '16 01:09 ghost

There is no entry to track support for HPKP in Chrome status. We should remove the id and put the data manually.

molant avatar Jan 04 '18 19:01 molant