hsts:clear_hsts
This is an old revision of the document!
Table of Contents
Clear HSTS
Cache time comes from the origin/site HSTS header. Part of it may look like so: strict-transport-security:max-age=15552000… basically you need it to say strict-transport-security:max-age=0 in order to disable HSTS for clients and wipe out their redirects.
response.headers["Strict-Transport-Security"] = 'max-age=0'
Clear HSTS in Firefox
Error code: ssl_error_bad_cert_domain.
If you see “I understand the risks”, follow these instructions. Otherwise:
- Close all tabs open with the site.
- Clear your history.
- In the address bar, type about:permissions.
- Search for and click on the site.
- Click “Forget About This Site”.
Clear HSTS in Google Chrome
Error message “Cannot connect to the real <domain name>.”
- In the address bar, type
chrome://net-internals/#hsts
- Type the domain name in the text field below “Delete domain”.
- Click the “Delete” button.
- Type the domain name in the text field below “Query domain”.
- Click the “Query” button.
- Your response should be “Not found”.
Clear HSTS in Opera
Error message “Cannot connect to the real <domain name>.”
- In the address bar, type
chrome://net-internals/#hsts
- Type the domain name in the text field below “Delete domain”.
- Click the “Delete” button.
- Type the domain name in the text field below “Query domain”.
- Click the “Query” button.
- Your response should be “Not found”.
Clear HSTS in Safari
- Close Safari.
- Delete the ~/Library/Cookies/HSTS.plist file.
- Reopen Safari
hsts/clear_hsts.1467368712.txt.gz · Last modified: 2020/07/15 09:30 (external edit)