HPKP Deprecated
HPKP was deprecated by Chrome in 2018: misconfiguration could lock users out of a site permanently, and its benefit fell short of Certificate Transparency.
Purpose
It documents why HPKP was deprecated and what replaces it (CT + Expect-CT), keeping new sites from adopting an abandoned mechanism.
Mechanism
A misconfigured HPKP (wrong fingerprint or lost backup) can make browsers refuse the connection permanently, with no recovery. Chrome 69+ removed HPKP support and recommends Certificate Transparency instead.
Use cases
- Security header deprecation
- CT as the replacement
- Misconfiguration risk
Related tools
HTTP Status Codes
Reference table of common HTTP status codes (1xx-5xx) with names, categories, and descriptions. Free, private, and 100% client-side. TOOL
URL Parser
Parse a URL into its components: protocol, host, path, query, hash, port, username, and password. Free, private, and 100% client-side. TOOL