Subject: Re: [websec] #34: HSTS cache manipulation and misuse by server enabled by wildcard cert

From: =JeffH <[email-masked]>
Date: Sun, 15 Jan 2012 18:57:02 -0800

Adam wondered..
 >
 > Why not just postMessage of the HTML <form> element?  If you want be
 > more sneaky about it, you can just the HTTP cache.  Anyway, web sites
 > are allowed to send messages to each other.

Yeah.  I submitted that item for completeness-sake, it'd gotten shuffled deep 
in the proverbial pile, and we hadn't discussed it here as yet.

=JeffH