Web Dev
SV
Rolling out Public Key Pinning with HPKP Reporting
[]
HTML5Rocks
To help you roll out a stricter form of SSL, Chrome 46 ships with a feature called HPKP reporting.
HPKP reporting, shipping in Chrome 46, is a feature that you can use to detect misconfigurations as you're rolling out HPKP.
An HPKP violation report is a JSON message sent in an HTTP POST request to your configured report-uri .
One last "gotcha"If you're deploying HPKP reporting, remember that Chrome does pin validation for all requests—including report-sending requests.
Otherwise, a pin violation on your site will trigger a report to the same domain, which will also fail pin violation, and thus you will not receive the report.
['reporting'
'public'
'ssl'
'rolling'
'certificate'
'header'
'pinning'
'browser'
'key'
'pins'
'pin'
'site'
'chrome'
'hpkp'
'violation']