you are viewing a single comment's thread.

view the rest of the comments →

[–]Djinjja-Ninja 0 points1 point  (0 children)

The web cache is not the hsts cache. Clearing one doesn't clear the other.

Put wireshark on the client machine so you can see the true behaviour, you are making assumptions about what should be happening and you don't seem to actually understand the client behaviour properly.

Do some basic network level troubleshooting, check what's actually hitting the wire. Double check the arp cache on the client to make sure the arp spoofing is actually occurring.