Forum Discussion
Skip HSTS/HPKP header error
HSTS HTTP Strict Transport Security tells the browser that the site must be only accessed via HTTPS (for the lifetime of the policy).
HPKP HTTP Public Key Pinning is an HTTP header that provides the public keys to the browser, so that the browser can independently verify the public key certificate provided from an HTTPS server. This mechanism prevents MITM and server spoofing.
Does anyone know if its possible to skip this HSTS/HPKP header error?
Not really - they are security mechanisms intended to warn users that they are being directed to a site that is not their intended destination.
You need to rely on the Browser/OS Captive Portal Detection mechanisms to prevent the HTTPS request blocking that you are seeing.
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
