Later archive addition
Bypassing HTTP Strict Transport Security
An attacker who can intercept a machine's unauthenticated NTP traffic can push its clock far into the future, expiring stored HSTS policies and even preloaded entries, so the browser talks plain HTTP again and SSLStrip works. The Delorean tool automates this, including a skimming mode that walks the clock forward in small hops to defeat maximum-adjustment limits.
Record
- Researcher
- Jose Selvi
- Format
- Whitepaper
In the archive
Related sources
Tags
This page is the archive's own catalogue record. The research is the work of Jose Selvi, first published at the original source. Preserved copies are kept so the citation survives its host.