Update for HOW TO: NGINX Reverse Proxy

[darkassassin07 652]

In this (locked) topic when setting up public key pinning there is info missing that will cause this header to be ignored by browsers:

 

As far as I understand from reading Public Key Pinning: Your doing it wrong you must pin a backup key along side your cert chain keys (IE pin at least one key that doesn't match your certs). Without it your pins are ignored and you may as well have not added it at all.

Edited July 11, 2018 by darkassassin07

[Swynol 375]

thanks @@darkassassin07

 

I will take a look. I think the guide is a bit out of date aswell so does need a overhaul