net: add GlobalSign to Twitter CDN pins.

net/http/transport_security_state_static.json

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file contains the HSTS preloaded list in a machine readable format.
 
 // The top-level element is a dictionary with two keys: "pinsets" maps details
 // of certificate pinning to a name and "entries" contains the HSTS details for
 // each host.
 //
@@ skipping 108 matching lines @@
         "AddTrustPublicCARoot",
         "AddTrustQualifiedCARoot",
         "COMODOCertificationAuthority",
         "SecureCertificateServices",
         "TrustedCertificateServices",
         "UTNDATACorpSGC",
         "UTNUSERFirstClientAuthenticationandEmail",
         "UTNUSERFirstHardware",
         "UTNUSERFirstObject",
         "GTECyberTrustGlobalRoot",
-        "BaltimoreCyberTrustRoot"
+        "BaltimoreCyberTrustRoot",
+        "GlobalSignRootCA",
+        "GlobalSignRootCA_R2",
+        "GlobalSignRootCA_R3"
       ]
     },
     {
       "name": "tor2web",
       "static_spki_hashes": [
         "AlphaSSL_G2",
         "Tor2web"
       ]
     },
     {
@@ skipping 371 matching lines @@
     { "name": "bigshinylock.minazo.net", "include_subdomains": true, "mode": "force-https" },
     { "name": "crate.io", "include_subdomains": true, "mode": "force-https" },
     { "name": "twitter.com", "mode": "force-https", "pins": "twitterCom" },
     { "name": "www.twitter.com", "include_subdomains": true, "mode": "force-https", "pins": "twitterCom" },
     { "name": "api.twitter.com", "include_subdomains": true, "pins": "twitterCDN" },
     { "name": "oauth.twitter.com", "include_subdomains": true, "pins": "twitterCom" },
     { "name": "mobile.twitter.com", "include_subdomains": true, "pins": "twitterCom" },
     { "name": "dev.twitter.com", "include_subdomains": true, "pins": "twitterCom" },
     { "name": "business.twitter.com", "include_subdomains": true, "pins": "twitterCom" },
     { "name": "platform.twitter.com", "include_subdomains": true, "pins": "twitterCDN" },
-    { "name": "si0.twimg.com", "include_subdomains": true, "pins": "twitterCDN" },
-    { "name": "twimg0-a.akamaihd.net", "include_subdomains": true, "pins": "twitterCDN" },
+    { "name": "twimg.com", "include_subdomains": true, "pins": "twitterCDN" },
     { "name": "braintreegateway.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "braintreepayments.com", "mode": "force-https" },
     { "name": "www.braintreepayments.com", "mode": "force-https" },
     { "name": "emailprivacytester.com", "mode": "force-https" },
     { "name": "tor2web.org", "include_subdomains": true, "pins": "tor2web" },
     { "name": "business.medbank.com.mt", "include_subdomains": true, "mode": "force-https" },
     { "name": "arivo.com.br", "include_subdomains": true, "mode": "force-https" },
     { "name": "www.apollo-auto.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "www.cueup.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "jitsi.org", "mode": "force-https" },
@@ skipping 150 matching lines @@
 
     // Entries that are only valid if the client supports SNI.
     { "name": "gmail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "googlemail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "www.gmail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "www.googlemail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "google-analytics.com", "include_subdomains": true, "pins": "google", "snionly": true },
     { "name": "googlegroups.com", "include_subdomains": true, "pins": "google", "snionly": true }
   ]
 }