2011-06-21 Adam Barth <abarth@webkit.org>

[WebKit-https.git] / Websites / bugs.webkit.org / ChangeLog

diff --git a/Websites/bugs.webkit.org/ChangeLog b/Websites/bugs.webkit.org/ChangeLog
index de21eb68e3076d92ad3b56949cd32ce6a056fa78..3bc1fce470500204495ad5ce6d31b065d9a63f8b 100644 (file)
--- a/Websites/bugs.webkit.org/ChangeLog
+++ b/Websites/bugs.webkit.org/ChangeLog
@@ -1,3 +1,15 @@
+2011-06-21  Adam Barth  <abarth@webkit.org>
+
+        Reviewed by Darin Adler.
+
+        bugs.webkit.org should use Strict-Transport-Security
+        https://bugs.webkit.org/show_bug.cgi?id=63097
+
+        Strict-Transport-Security forces all connections to bugs.webkit.org to
+        use HTTPS, preventing sslstrip and other attacks.
+
+        * .htaccess:
+
 2011-05-04  Caio Marcelo de Oliveira Filho  <caio.oliveira@openbossa.org>
 
         Reviewed by Adam Roben.