On Tue, Jun 4, 2013 at 6:03 AM, Sheehe, Charles J. (GRC-DPC0) < [email protected]> wrote:
> Why can’t the Max-Max-AGE equal a formula Max age= (average > usage)*2+1day > Hi Charles, In the case of frequently visited sites, that would shrink pin lifetimes to the point that even a brief interruption of browsing habits (vacation, etc.) would deactivate the pins. Also, that wouldn't guarantee an upper-bound on pin lifetimes. While opinions differ on this, I think a guaranteed upper-bound is desirable, to provide sites clarity on how long ill-effects from pinning might last. Trevor
_______________________________________________ websec mailing list [email protected] https://www.ietf.org/mailman/listinfo/websec
