Products · Pattern or everyday thing
HSTS
Raised as a usability problem by 5 people on Hacker News over 8 years (2016–2023), in 6 threads.
People raised many different problems with HSTS, but no single problem has yet been raised by 3 people in 3 different months and threads.
Unreviewed issues were grouped by machine: Claude Haiku labelled each comment as a usability complaint, named what it's about and summed up the problem in a line, and a small model grouped similar problems. Nobody has checked them by hand. Expect mistakes.
The newest 6 complaints
- No easy way to get around HSTS forcing HTTPS on misconfigured sites; must create new profile2023-05-03
- Accidentally cached HSTS redirect on localhost is nearly impossible for developers to undo2023-03-30
- Browsers refuse to load expired-certificate sites with no user override, blocking admins from fixing certs2022-08-09
- Browser blocks bypassing certificate errors even when the user knows the cause and accepts the risk2022-01-19
- Certificate errors lock users out with a scary page and no way to ignore it2017-04-09
- Average users find it very difficult to clear HSTS/HPKP data2016-11-04