Index: net/base/transport_security_state_static.json |
diff --git a/net/base/transport_security_state_static.json b/net/base/transport_security_state_static.json |
deleted file mode 100644 |
index f18eda3deb3c2c8b92198a75c27cb26c0c328a7e..0000000000000000000000000000000000000000 |
--- a/net/base/transport_security_state_static.json |
+++ /dev/null |
@@ -1,593 +0,0 @@ |
-// Copyright (c) 2012 The Chromium Authors. All rights reserved. |
-// Use of this source code is governed by a BSD-style license that can be |
-// found in the LICENSE file. |
- |
-// This file contains the HSTS preloaded list in a machine readable format. |
- |
-// The top-level element is a dictionary with two keys: "pinsets" maps details |
-// of certificate pinning to a name and "entries" contains the HSTS details for |
-// each host. |
-// |
-// "pinsets" is a list of objects. Each object has the following members: |
-// name: (string) the name of the pinset |
-// static_spki_hashes: (list of strings) the set of allowed SPKIs hashes |
-// bad_static_spki_hashes: (optional list of strings) the set of forbidden SPKIs hashes |
-// |
-// For a given pinset, a certifiacte is accepted if at least one of the |
-// "static_spki_hashes" SPKIs is found in the chain and none of the "bad_static_spki_hashes" SPKIs are. |
-// SPKIs are specified as names, which must match up with the file of |
-// certificates. |
-// |
-// "entries" is a list of objects. Each object has the following members: |
-// name: (string) the DNS name of the host in question |
-// include_subdomains: (optional bool) whether subdomains of |name| are also covered |
-// mode: (optional string) "force-https" iff covered names should require HTTPS |
-// pins: (optional string) the |name| member of an object in |pinsets| |
-// snionly: (optional bool) if true then this entry is only enforced if TLS is |
-// enabled because the site in question only serves the correct |
-// certificate if SNI is sent. Note that this only covers the case where |
-// TLS has been disabled by explicit configuration. If TLS was disabled |
-// because of SSLv3 fallback, then the entry is still in force and a |
-// fatal certificate error will result. Spurious certificate errors are |
-// an unfortunate result of SSLv3 fallback. |
- |
-{ |
- "pinsets": [ |
- { |
- "name": "test", |
- "static_spki_hashes": [ |
- "TestSPKI" |
- ] |
- }, |
- { |
- "name": "google", |
- "static_spki_hashes": [ |
- "VeriSignClass3", |
- "VeriSignClass3_G3", |
- "Google1024", |
- "Google2048", |
- "GoogleBackup1024", |
- "GoogleBackup2048", |
- "EquifaxSecureCA", |
- "GeoTrustGlobal" |
- ], |
- "bad_static_spki_hashes": [ |
- "Aetna", |
- "Intel", |
- "TCTrustCenter", |
- "Vodafone" |
- ] |
- }, |
- { |
- "name": "tor", |
- "static_spki_hashes": [ |
- "RapidSSL", |
- "DigiCertEVRoot", |
- "Tor1", |
- "Tor2", |
- "Tor3" |
- ] |
- }, |
- { |
- "name": "twitterCom", |
- "static_spki_hashes": [ |
- "VeriSignClass1", |
- "VeriSignClass3", |
- "VeriSignClass3_G4", |
- "VeriSignClass4_G3", |
- "VeriSignClass3_G3", |
- "VeriSignClass1_G3", |
- "VeriSignClass2_G3", |
- "VeriSignClass3_G2", |
- "VeriSignClass2_G2", |
- "VeriSignClass3_G5", |
- "VeriSignUniversal", |
- "GeoTrustGlobal", |
- "GeoTrustGlobal2", |
- "GeoTrustUniversal", |
- "GeoTrustUniversal2", |
- "GeoTrustPrimary", |
- "GeoTrustPrimary_G2", |
- "GeoTrustPrimary_G3", |
- "Twitter1" |
- ] |
- }, |
- { |
- "name": "twitterCDN", |
- "static_spki_hashes": [ |
- "VeriSignClass1", |
- "VeriSignClass3", |
- "VeriSignClass3_G4", |
- "VeriSignClass4_G3", |
- "VeriSignClass3_G3", |
- "VeriSignClass1_G3", |
- "VeriSignClass2_G3", |
- "VeriSignClass3_G2", |
- "VeriSignClass2_G2", |
- "VeriSignClass3_G5", |
- "VeriSignUniversal", |
- "GeoTrustGlobal", |
- "GeoTrustGlobal2", |
- "GeoTrustUniversal", |
- "GeoTrustUniversal2", |
- "GeoTrustPrimary", |
- "GeoTrustPrimary_G2", |
- "GeoTrustPrimary_G3", |
- "Twitter1", |
- |
- "Entrust_2048", |
- "Entrust_EV", |
- "Entrust_G2", |
- "Entrust_SSL", |
- "AAACertificateServices", |
- "AddTrustClass1CARoot", |
- "AddTrustExternalCARoot", |
- "AddTrustPublicCARoot", |
- "AddTrustQualifiedCARoot", |
- "COMODOCertificationAuthority", |
- "SecureCertificateServices", |
- "TrustedCertificateServices", |
- "UTNDATACorpSGC", |
- "UTNUSERFirstClientAuthenticationandEmail", |
- "UTNUSERFirstHardware", |
- "UTNUSERFirstObject", |
- "GTECyberTrustGlobalRoot" |
- ] |
- }, |
- { |
- "name": "tor2web", |
- "static_spki_hashes": [ |
- "AlphaSSL_G2", |
- "Tor2web" |
- ] |
- }, |
- { |
- "name": "cryptoCat", |
- "static_spki_hashes": [ |
- "DigiCertEVRoot", |
- "CryptoCat1" |
- ] |
- } |
- ], |
- |
- "entries": [ |
- // Dummy entry to test certificate pinning. |
- { "name": "pinningtest.appspot.com", "include_subdomains": true, "pins": "test" }, |
- |
- // (*.)google.com, iff using SSL, must use an acceptable certificate. |
- { "name": "google.com", "include_subdomains": true, "pins": "google" }, |
- |
- // Now we force HTTPS for subtrees of google.com. |
- { "name": "health.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "checkout.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "chrome.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "docs.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "sites.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "spreadsheets.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "appengine.google.com", "mode": "force-https", "pins": "google" }, |
- { "name": "encrypted.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "accounts.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "profiles.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "mail.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "talkgadget.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "talk.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "hostedtalkgadget.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "plus.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "plus.sandbox.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "script.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "history.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- |
- // Other Google-related domains that must use HTTPS. |
- { "name": "market.android.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "ssl.google-analytics.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "drive.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "googleplex.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "groups.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "apis.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "chromiumcodereview.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "codereview.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "codereview.chromium.org", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "code.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- { "name": "googlecode.com", "include_subdomains": true, "pins": "google" }, |
- { "name": "dl.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, |
- |
- // chart.apis.google.com is *not* HSTS because the certificate doesn't match |
- // and there are lots of links out there that still use the name. The correct |
- // hostname for this is chart.googleapis.com. |
- { "name": "chart.apis.google.com", "include_subdomains": true, "pins": "google" }, |
- |
- // Other Google-related domains that must use an acceptable certificate |
- // iff using SSL. |
- { "name": "ytimg.com", "include_subdomains": true, "pins": "google" }, |
- { "name": "googleusercontent.com", "include_subdomains": true, "pins": "google" }, |
- { "name": "youtube.com", "include_subdomains": true, "pins": "google" }, |
- { "name": "googleapis.com", "include_subdomains": true, "pins": "google" }, |
- { "name": "googleadservices.com", "include_subdomains": true, "pins": "google" }, |
- { "name": "appspot.com", "include_subdomains": true, "pins": "google" }, |
- { "name": "googlesyndication.com", "include_subdomains": true, "pins": "google" }, |
- { "name": "doubleclick.net", "include_subdomains": true, "pins": "google" }, |
- { "name": "ssl.gstatic.com", "include_subdomains": true, "pins": "google" }, |
- { "name": "youtu.be", "include_subdomains": true, "pins": "google" }, |
- { "name": "android.com", "include_subdomains": true, "pins": "google" }, |
- { "name": "googlecommerce.com", "include_subdomains": true, "pins": "google" }, |
- { "name": "urchin.com", "include_subdomains": true, "pins": "google" }, |
- { "name": "goo.gl", "include_subdomains": true, "pins": "google" }, |
- { "name": "g.co", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ac", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ad", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ae", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.af", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ag", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.am", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.as", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.at", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.az", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ba", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.be", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.bf", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.bg", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.bi", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.bj", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.bs", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.by", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ca", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.cat", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.cc", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.cd", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.cf", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.cg", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ch", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ci", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.cl", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.cm", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.cn", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.ao", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.bw", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.ck", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.cr", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.hu", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.id", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.il", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.im", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.in", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.je", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.jp", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.ke", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.kr", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.ls", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.ma", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.mz", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.nz", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.th", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.tz", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.ug", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.uk", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.uz", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.ve", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.vi", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.za", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.zm", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.co.zw", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.af", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.ag", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.ai", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.ar", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.au", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.bd", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.bh", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.bn", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.bo", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.br", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.by", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.bz", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.cn", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.co", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.cu", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.cy", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.do", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.ec", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.eg", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.et", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.fj", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.ge", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.gh", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.gi", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.gr", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.gt", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.hk", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.iq", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.jm", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.jo", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.kh", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.kw", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.lb", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.ly", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.mt", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.mx", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.my", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.na", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.nf", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.ng", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.ni", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.np", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.nr", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.om", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.pa", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.pe", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.ph", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.pk", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.pl", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.pr", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.py", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.qa", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.ru", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.sa", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.sb", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.sg", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.sl", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.sv", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.tj", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.tn", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.tr", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.tw", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.ua", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.uy", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.vc", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.ve", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.com.vn", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.cv", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.cz", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.de", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.dj", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.dk", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.dm", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.dz", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ee", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.es", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.fi", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.fm", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.fr", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ga", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ge", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.gg", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.gl", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.gm", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.gp", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.gr", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.gy", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.hk", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.hn", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.hr", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ht", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.hu", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ie", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.im", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.info", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.iq", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.is", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.it", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.it.ao", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.je", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.jo", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.jobs", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.jp", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.kg", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ki", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.kz", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.la", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.li", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.lk", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.lt", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.lu", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.lv", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.md", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.me", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.mg", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.mk", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ml", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.mn", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ms", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.mu", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.mv", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.mw", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ne", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ne.jp", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.net", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.nl", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.no", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.nr", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.nu", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.off.ai", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.pk", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.pl", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.pn", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ps", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.pt", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ro", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.rs", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ru", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.rw", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.sc", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.se", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.sh", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.si", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.sk", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.sm", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.sn", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.so", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.st", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.td", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.tg", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.tk", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.tl", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.tm", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.tn", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.to", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.tp", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.tt", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.us", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.uz", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.vg", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.vu", "include_subdomains": true, "pins": "google" }, |
- { "name": "google.ws", "include_subdomains": true, "pins": "google" }, |
- // Exclude the learn.doubleclick.net subdomain because it uses a different |
- // CA. |
- { "name": "learn.doubleclick.net", "include_subdomains": true }, |
- |
- // Force HTTPS for sites that have requested it. |
- { "name": "www.paypal.com", "mode": "force-https" }, |
- { "name": "www.elanex.biz", "mode": "force-https" }, |
- { "name": "jottit.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "sunshinepress.org", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "www.noisebridge.net", "mode": "force-https" }, |
- { "name": "neg9.org", "mode": "force-https" }, |
- { "name": "riseup.net", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "factor.cc", "mode": "force-https" }, |
- { "name": "members.mayfirst.org", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "support.mayfirst.org", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "id.mayfirst.org", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "lists.mayfirst.org", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "webmail.mayfirst.org", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "roundcube.mayfirst.org", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "aladdinschools.appspot.com", "mode": "force-https" }, |
- { "name": "ottospora.nl", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "www.paycheckrecords.com", "mode": "force-https" }, |
- { "name": "lastpass.com", "mode": "force-https" }, |
- { "name": "www.lastpass.com", "mode": "force-https" }, |
- { "name": "keyerror.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "entropia.de", "mode": "force-https" }, |
- { "name": "www.entropia.de", "mode": "force-https" }, |
- { "name": "romab.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "logentries.com", "mode": "force-https" }, |
- { "name": "www.logentries.com", "mode": "force-https" }, |
- { "name": "stripe.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "cloudsecurityalliance.org", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "login.sapo.pt", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "mattmccutchen.net", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "betnet.fr", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "uprotect.it", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "squareup.com", "mode": "force-https" }, |
- { "name": "cert.se", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "crypto.is", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "simon.butcher.name", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "linx.net", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "dropcam.com", "mode": "force-https" }, |
- { "name": "www.dropcam.com", "mode": "force-https" }, |
- { "name": "ebanking.indovinabank.com.vn", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "epoxate.com", "mode": "force-https" }, |
- { "name": "torproject.org", "mode": "force-https", "pins": "tor" }, |
- { "name": "blog.torproject.org", "include_subdomains": true, "mode": "force-https", "pins": "tor" }, |
- { "name": "check.torproject.org", "include_subdomains": true, "mode": "force-https", "pins": "tor" }, |
- { "name": "www.torproject.org", "include_subdomains": true, "mode": "force-https", "pins": "tor" }, |
- { "name": "dist.torproject.org", "include_subdomains": true, "mode": "force-https", "pins": "tor" }, |
- { "name": "www.moneybookers.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "ledgerscope.net", "mode": "force-https" }, |
- { "name": "www.ledgerscope.net", "mode": "force-https" }, |
- { "name": "kyps.net", "mode": "force-https" }, |
- { "name": "www.kyps.net", "mode": "force-https" }, |
- { "name": "app.recurly.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "api.recurly.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "greplin.com", "mode": "force-https" }, |
- { "name": "www.greplin.com", "mode": "force-https" }, |
- { "name": "luneta.nearbuysystems.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "ubertt.org", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "pixi.me", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "grepular.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "mydigipass.com", "mode": "force-https" }, |
- { "name": "www.mydigipass.com", "mode": "force-https" }, |
- { "name": "developer.mydigipass.com", "mode": "force-https" }, |
- { "name": "www.developer.mydigipass.com", "mode": "force-https" }, |
- { "name": "sandbox.mydigipass.com", "mode": "force-https" }, |
- { "name": "www.sandbox.mydigipass.com", "mode": "force-https" }, |
- { "name": "crypto.cat", "mode": "force-https", "pins": "cryptoCat" }, |
- { "name": "bigshinylock.minazo.net", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "crate.io", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "twitter.com", "mode": "force-https", "pins": "twitterCom" }, |
- { "name": "www.twitter.com", "include_subdomains": true, "mode": "force-https", "pins": "twitterCom" }, |
- { "name": "api.twitter.com", "include_subdomains": true, "pins": "twitterCDN" }, |
- { "name": "oauth.twitter.com", "include_subdomains": true, "pins": "twitterCom" }, |
- { "name": "mobile.twitter.com", "include_subdomains": true, "pins": "twitterCom" }, |
- { "name": "dev.twitter.com", "include_subdomains": true, "pins": "twitterCom" }, |
- { "name": "business.twitter.com", "include_subdomains": true, "pins": "twitterCom" }, |
- { "name": "platform.twitter.com", "include_subdomains": true, "pins": "twitterCDN" }, |
- { "name": "si0.twimg.com", "include_subdomains": true, "pins": "twitterCDN" }, |
- { "name": "twimg0-a.akamaihd.net", "include_subdomains": true, "pins": "twitterCDN" }, |
- { "name": "braintreegateway.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "braintreepayments.com", "mode": "force-https" }, |
- { "name": "www.braintreepayments.com", "mode": "force-https" }, |
- { "name": "emailprivacytester.com", "mode": "force-https" }, |
- { "name": "tor2web.org", "include_subdomains": true, "pins": "tor2web" }, |
- { "name": "business.medbank.com.mt", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "arivo.com.br", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "www.apollo-auto.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "www.cueup.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "jitsi.org", "mode": "force-https" }, |
- { "name": "www.jitsi.org", "mode": "force-https" }, |
- { "name": "download.jitsi.org", "mode": "force-https" }, |
- { "name": "sol.io", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "irccloud.com", "mode": "force-https" }, |
- { "name": "www.irccloud.com", "mode": "force-https" }, |
- { "name": "alpha.irccloud.com", "mode": "force-https" }, |
- { "name": "passwd.io", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "browserid.org", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "login.persona.org", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "neonisi.com", "mode": "force-https" }, |
- { "name": "www.neonisi.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "shops.neonisi.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "piratenlogin.de", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "howrandom.org", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "intercom.io", "mode": "force-https" }, |
- { "name": "api.intercom.io", "mode": "force-https" }, |
- { "name": "www.intercom.io", "mode": "force-https" }, |
- { "name": "fatzebra.com.au", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "csawctf.poly.edu", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "makeyourlaws.org", "mode": "force-https" }, |
- { "name": "www.makeyourlaws.org", "mode": "force-https" }, |
- { "name": "iop.intuit.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "surfeasy.com", "mode": "force-https" }, |
- { "name": "www.surfeasy.com", "mode": "force-https" }, |
- { "name": "packagist.org", "mode": "force-https" }, |
- { "name": "lookout.com", "mode": "force-https" }, |
- { "name": "www.lookout.com", "mode": "force-https" }, |
- { "name": "mylookout.com", "mode": "force-https" }, |
- { "name": "www.mylookout.com", "mode": "force-https" }, |
- { "name": "dm.lookout.com", "mode": "force-https" }, |
- { "name": "dm.mylookout.com", "mode": "force-https" }, |
- { "name": "itriskltd.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "stocktrade.de", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "openshift.redhat.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "therapynotes.com", "mode": "force-https" }, |
- { "name": "www.therapynotes.com", "mode": "force-https" }, |
- { "name": "wiz.biz", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "my.onlime.ch", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "webmail.onlime.ch", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "crm.onlime.ch", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "www.gov.uk", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "silentcircle.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "silentcircle.org", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "serverdensity.io", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "my.alfresco.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "webmail.gigahost.dk", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "paymill.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "paymill.de", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "gocardless.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "espra.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "zoo24.de", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "mega.co.nz", "mode": "force-https" }, |
- { "name": "api.mega.co.nz", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "lockify.com", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "writeapp.me", "mode": "force-https" }, |
- { "name": "bugzilla.mozilla.org", "include_subdomains": true, "mode": "force-https" }, |
- { "name": "members.nearlyfreespeech.net", "mode": "force-https" }, |
- { "name": "ssl.panoramio.com", "mode": "force-https" }, |
- { "name": "kiwiirc.com", "mode": "force-https" }, |
- |
- // Entries that are only valid if the client supports SNI. |
- { "name": "gmail.com", "mode": "force-https", "pins": "google", "snionly": true }, |
- { "name": "googlemail.com", "mode": "force-https", "pins": "google", "snionly": true }, |
- { "name": "www.gmail.com", "mode": "force-https", "pins": "google", "snionly": true }, |
- { "name": "www.googlemail.com", "mode": "force-https", "pins": "google", "snionly": true }, |
- { "name": "google-analytics.com", "include_subdomains": true, "pins": "google", "snionly": true }, |
- { "name": "googlegroups.com", "include_subdomains": true, "pins": "google", "snionly": true } |
- ] |
-} |