Would this mean that I could potentially be susceptible to a man in the middle attack? Would the browser need to cache this information again?


Yes and yes, assuming you initially try to access the site through HTTP. If you initially try to access the site through HTTPS, it will automatically and immediately re-establish HSTS.

  • Could you elaborate on the use of initially? – PeanutsMonkey Sep 29 '11 at 18:36
  • By "initially", I mean your first access to the site after having cleared things. It can either by clicking on a link on another web page, a bookmark, or entering the site name in the URL bar manually. – David Schwartz Sep 30 '11 at 0:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.