[KongchangAI]
ProductSSL 固定与 HSTS-preload 主动探测端点

/api/ssl-pinning-policy-probe

An API endpoint that verifies the runtime enforcement of security policies such as HSTS and Expect-CT by actively establishing TLS connections, outputting a 0-100 pinning policy score and per-port probe results.

Timeline (last 90 days)

Oct 12

URL Metadata API adds two paid endpoints, /api/jsonld-cross-validate and /api/ssl-pinning-policy-probe, under the x402 payment protocol, priced at $0.0005 each

Unverified50%
Oct 12

/api/ssl-pinning-policy-probe opens TLS connections on ports 443, 80 and 8443, capturing HSTS, Expect-CT, HPKP, X-Content-Type-Options, X-Frame-Options and port 80 downgrade redirect information

Unverified50%
Oct 12

SSL pinning policy probe returns pinning_policy_score (0-100, A-F grade), verdict (production_fortified/standard/weak/no_hsts) and per-port results

Unverified50%

All Facts (3)

Source Articles