Would this mean that I could potentially be susceptible to a man in the middle attack? Would the browser need to cache this information again?
1 Answer
Yes and yes, assuming you initially try to access the site through HTTP. If you initially try to access the site through HTTPS, it will automatically and immediately re-establish HSTS.
-
-
By "initially", I mean your first access to the site after having cleared things. It can either by clicking on a link on another web page, a bookmark, or entering the site name in the URL bar manually. Sep 30, 2011 at 0:15