Appended period to hostnames can bypass HPKP and HSTS protections — Mozilla

Add a description of Appended period to hostnames can bypass HPKP and HSTS protections — Mozilla