这篇文章上次修改于 2201 天前,可能其部分内容已经发生变化,如有疑问可询问作者。 ### chrome的hsts政策,针对.app域名,chrome强制使用https协议访问,比如: ```java http://hitube.app 会转换成 https://hitube.app ``` ### 可以打开 chrome://net-internals/#hsts 查询 Query HSTS/PKP domain ```config static_sts_domain: app static_upgrade_mode: FORCE_HTTPS static_sts_include_subdomains: true static_sts_observed: 1540270800 static_pkp_domain: static_pkp_include_subdomains: static_pkp_observed: static_spki_hashes: dynamic_sts_domain: hitube.app dynamic_upgrade_mode: FORCE_HTTPS dynamic_sts_include_subdomains: false dynamic_sts_observed: 1542096503.341038 dynamic_sts_expiry: 1628496503.341037 dynamic_pkp_domain: dynamic_pkp_include_subdomains: dynamic_pkp_observed: dynamic_pkp_expiry: dynamic_spki_hashes: ``` ### 对于一般的域名,可以使用Delete domain security policies 删掉,但是.app 域名不可以,只能安装证书了
没有评论