Friday, January 29, 2010

Chrome Supports Strict Transport Security (STS)

Good news for our continual efforts to increase SSL/TLS security in applications and browsers. The new release of Google Chrome supports Strict Transport Security! Hats off to the STS team and Paypal, one of the early adopters that helped get STS moving. In addition to Chrome 4.0.249.78, STS is also supported on Firefox via the NoScript plugin. So now that Chrome has adopted support, I'd like to see Firefox (without need for NoScript) and IE also provide STS support.

-Michael Coates