Project

General

Profile

Feature #480

Updated by Soren Stoutner over 2 years ago

https://stackoverflow.com/questions/37379933/does-androids-webview-support-hsts

https://developer.android.com/training/articles/security-config.html

HSTS provides no benefit for Privacy Browser because it defaults to HTTPS. HTTPS by default.

However, it has the negative privacy consequence of creating a list of all the websites that a user has visited and storing that list in WebView's cache.

This cache is wiped out whenever Clear and Exit is run with the default settings, but it makes sense to me to disable the storage of such information in the first place.

Back