Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(107)

Side by Side Diff: net/http/transport_security_state_static.json

Issue 15147002: Set preloaded HSTS policy for Google Translate. (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: Rebase. Created 7 years, 4 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « net/http/transport_security_state_static.h ('k') | no next file » | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 // This file contains the HSTS preloaded list in a machine readable format. 5 // This file contains the HSTS preloaded list in a machine readable format.
6 6
7 // The top-level element is a dictionary with two keys: "pinsets" maps details 7 // The top-level element is a dictionary with two keys: "pinsets" maps details
8 // of certificate pinning to a name and "entries" contains the HSTS details for 8 // of certificate pinning to a name and "entries" contains the HSTS details for
9 // each host. 9 // each host.
10 // 10 //
(...skipping 160 matching lines...) Expand 10 before | Expand all | Expand 10 after
171 { "name": "profiles.google.com", "include_subdomains": true, "mode": "force- https", "pins": "google" }, 171 { "name": "profiles.google.com", "include_subdomains": true, "mode": "force- https", "pins": "google" },
172 { "name": "mail.google.com", "include_subdomains": true, "mode": "force-http s", "pins": "google" }, 172 { "name": "mail.google.com", "include_subdomains": true, "mode": "force-http s", "pins": "google" },
173 { "name": "talkgadget.google.com", "include_subdomains": true, "mode": "forc e-https", "pins": "google" }, 173 { "name": "talkgadget.google.com", "include_subdomains": true, "mode": "forc e-https", "pins": "google" },
174 { "name": "talk.google.com", "include_subdomains": true, "mode": "force-http s", "pins": "google" }, 174 { "name": "talk.google.com", "include_subdomains": true, "mode": "force-http s", "pins": "google" },
175 { "name": "hostedtalkgadget.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" }, 175 { "name": "hostedtalkgadget.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
176 { "name": "plus.google.com", "include_subdomains": true, "mode": "force-http s", "pins": "google" }, 176 { "name": "plus.google.com", "include_subdomains": true, "mode": "force-http s", "pins": "google" },
177 { "name": "plus.sandbox.google.com", "include_subdomains": true, "mode": "fo rce-https", "pins": "google" }, 177 { "name": "plus.sandbox.google.com", "include_subdomains": true, "mode": "fo rce-https", "pins": "google" },
178 { "name": "script.google.com", "include_subdomains": true, "mode": "force-ht tps", "pins": "google" }, 178 { "name": "script.google.com", "include_subdomains": true, "mode": "force-ht tps", "pins": "google" },
179 { "name": "history.google.com", "include_subdomains": true, "mode": "force-h ttps", "pins": "google" }, 179 { "name": "history.google.com", "include_subdomains": true, "mode": "force-h ttps", "pins": "google" },
180 { "name": "security.google.com", "include_subdomains": true, "mode": "force- https", "pins": "google" }, 180 { "name": "security.google.com", "include_subdomains": true, "mode": "force- https", "pins": "google" },
181 { "name": "translate.google.com", "include_subdomains": true, "mode": "force -https", "pins": "google" },
181 182
182 // Other Google-related domains that must use HTTPS. 183 // Other Google-related domains that must use HTTPS.
183 { "name": "market.android.com", "include_subdomains": true, "mode": "force-h ttps", "pins": "google" }, 184 { "name": "market.android.com", "include_subdomains": true, "mode": "force-h ttps", "pins": "google" },
184 { "name": "ssl.google-analytics.com", "include_subdomains": true, "mode": "f orce-https", "pins": "google" }, 185 { "name": "ssl.google-analytics.com", "include_subdomains": true, "mode": "f orce-https", "pins": "google" },
185 { "name": "drive.google.com", "include_subdomains": true, "mode": "force-htt ps", "pins": "google" }, 186 { "name": "drive.google.com", "include_subdomains": true, "mode": "force-htt ps", "pins": "google" },
186 { "name": "googleplex.com", "include_subdomains": true, "mode": "force-https ", "pins": "google" }, 187 { "name": "googleplex.com", "include_subdomains": true, "mode": "force-https ", "pins": "google" },
187 { "name": "groups.google.com", "include_subdomains": true, "mode": "force-ht tps", "pins": "google" }, 188 { "name": "groups.google.com", "include_subdomains": true, "mode": "force-ht tps", "pins": "google" },
188 { "name": "apis.google.com", "include_subdomains": true, "mode": "force-http s", "pins": "google" }, 189 { "name": "apis.google.com", "include_subdomains": true, "mode": "force-http s", "pins": "google" },
189 { "name": "chromiumcodereview.appspot.com", "include_subdomains": true, "mod e": "force-https", "pins": "google" }, 190 { "name": "chromiumcodereview.appspot.com", "include_subdomains": true, "mod e": "force-https", "pins": "google" },
190 { "name": "chrome-devtools-frontend.appspot.com", "include_subdomains": true , "mode": "force-https", "pins": "google" }, 191 { "name": "chrome-devtools-frontend.appspot.com", "include_subdomains": true , "mode": "force-https", "pins": "google" },
191 { "name": "codereview.appspot.com", "include_subdomains": true, "mode": "for ce-https", "pins": "google" }, 192 { "name": "codereview.appspot.com", "include_subdomains": true, "mode": "for ce-https", "pins": "google" },
192 { "name": "codereview.chromium.org", "include_subdomains": true, "mode": "fo rce-https", "pins": "google" }, 193 { "name": "codereview.chromium.org", "include_subdomains": true, "mode": "fo rce-https", "pins": "google" },
193 { "name": "code.google.com", "include_subdomains": true, "mode": "force-http s", "pins": "google" }, 194 { "name": "code.google.com", "include_subdomains": true, "mode": "force-http s", "pins": "google" },
194 { "name": "googlecode.com", "include_subdomains": true, "pins": "google" }, 195 { "name": "googlecode.com", "include_subdomains": true, "pins": "google" },
195 { "name": "dl.google.com", "include_subdomains": true, "mode": "force-https" , "pins": "google" }, 196 { "name": "dl.google.com", "include_subdomains": true, "mode": "force-https" , "pins": "google" },
197 { "name": "translate.googleapis.com", "include_subdomains": true, "mode": "f orce-https", "pins": "google" },
196 198
197 // chart.apis.google.com is *not* HSTS because the certificate doesn't match 199 // chart.apis.google.com is *not* HSTS because the certificate doesn't match
198 // and there are lots of links out there that still use the name. The correc t 200 // and there are lots of links out there that still use the name. The correc t
199 // hostname for this is chart.googleapis.com. 201 // hostname for this is chart.googleapis.com.
200 { "name": "chart.apis.google.com", "include_subdomains": true, "pins": "goog le" }, 202 { "name": "chart.apis.google.com", "include_subdomains": true, "pins": "goog le" },
201 203
202 // Other Google-related domains that must use an acceptable certificate 204 // Other Google-related domains that must use an acceptable certificate
203 // iff using SSL. 205 // iff using SSL.
204 { "name": "ytimg.com", "include_subdomains": true, "pins": "google" }, 206 { "name": "ytimg.com", "include_subdomains": true, "pins": "google" },
205 { "name": "googleusercontent.com", "include_subdomains": true, "pins": "goog le" }, 207 { "name": "googleusercontent.com", "include_subdomains": true, "pins": "goog le" },
(...skipping 421 matching lines...) Expand 10 before | Expand all | Expand 10 after
627 629
628 // Entries that are only valid if the client supports SNI. 630 // Entries that are only valid if the client supports SNI.
629 { "name": "gmail.com", "mode": "force-https", "pins": "google", "snionly": t rue }, 631 { "name": "gmail.com", "mode": "force-https", "pins": "google", "snionly": t rue },
630 { "name": "googlemail.com", "mode": "force-https", "pins": "google", "snionl y": true }, 632 { "name": "googlemail.com", "mode": "force-https", "pins": "google", "snionl y": true },
631 { "name": "www.gmail.com", "mode": "force-https", "pins": "google", "snionly ": true }, 633 { "name": "www.gmail.com", "mode": "force-https", "pins": "google", "snionly ": true },
632 { "name": "www.googlemail.com", "mode": "force-https", "pins": "google", "sn ionly": true }, 634 { "name": "www.googlemail.com", "mode": "force-https", "pins": "google", "sn ionly": true },
633 { "name": "google-analytics.com", "include_subdomains": true, "pins": "googl e", "snionly": true }, 635 { "name": "google-analytics.com", "include_subdomains": true, "pins": "googl e", "snionly": true },
634 { "name": "googlegroups.com", "include_subdomains": true, "pins": "google", "snionly": true } 636 { "name": "googlegroups.com", "include_subdomains": true, "pins": "google", "snionly": true }
635 ] 637 ]
636 } 638 }
OLDNEW
« no previous file with comments | « net/http/transport_security_state_static.h ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698