Remove several domains from the HSTS preload list and remove an extra space.

Remove several domains from the HSTS preload list and remove an extra space.

videomail.io:
> I mistakenly used this code for helmet, a npm package to set various
> HTTP headers:
>
> ```
>         app.use(helmet.hsts({
>           maxAge:            108864000000, // Must be at least 18 weeks to be approved by Google
>           preload:           true
>         }))
> ```
>
> But now, I can't visit the local site with plain HTTP anymore. I need
> that for some tests.

tablotv.com:
> No one from our organization (we are small) added our domain to the list and
> according to the documentation on the HSTS preload site it may take many
> revisions to be removed from the list.
> ...
> As for how it happened, we are not sure.

involved-it.be:
> Several months ago I (accidently) added involved-it.be to the HSTS
> preload list presumably via https://hstspreload.appspot.com/.

bam.com.au: A mail subdomain hosted by a third-party does not support SSL.

logotype.se:
> The reason is that I do development, and for some subdomains I don't
> have TLS setup on the different server instances.

BUG=527947
TBR=palmer@chromium.org

Committed: https://crrev.com/253102d2f4b59a803816d2567233a5823ab5d782
Cr-Commit-Position: refs/heads/master@{#385850}

[lgarron, 2016-03-17 21:43:40]

Note: since https://crbug.com/595493 is still open and requests are likely to
continue in the coming weeks, this CL is meant to be landed in a week or two as
a single batch.

[lgarron, 2016-04-07 19:47:54]

Description was changed from

==========
Remove several domains from the HSTS preload list.

videomail.io:
> I mistakenly used this code for helmet, a npm package to set various
> HTTP headers:
>
> ```
>         app.use(helmet.hsts({
>           maxAge:            108864000000, // Must be at least 18 weeks to be
approved by Google
>           preload:           true
>         }))
> ```
>
> But now, I can't visit the local site with plain HTTP anymore. I need
> that for some tests.

tablotv.com:
> No one from our organization (we are small) added our domain to the list and
> according to the documentation on the HSTS preload site it may take many
> revisions to be removed from the list.
> ...
> As for how it happened, we are not sure.

involved-it.be:
> Several months ago I (accidently) added involved-it.be to the HSTS
> preload list presumably via https://hstspreload.appspot.com/.

BUG=527947
==========

to

==========
Remove several domains from the HSTS preload list and fix a trailing space.

videomail.io:
> I mistakenly used this code for helmet, a npm package to set various
> HTTP headers:
>
> ```
>         app.use(helmet.hsts({
>           maxAge:            108864000000, // Must be at least 18 weeks to be
approved by Google
>           preload:           true
>         }))
> ```
>
> But now, I can't visit the local site with plain HTTP anymore. I need
> that for some tests.

tablotv.com:
> No one from our organization (we are small) added our domain to the list and
> according to the documentation on the HSTS preload site it may take many
> revisions to be removed from the list.
> ...
> As for how it happened, we are not sure.

involved-it.be:
> Several months ago I (accidently) added involved-it.be to the HSTS
> preload list presumably via https://hstspreload.appspot.com/.

BUG=527947
==========

[lgarron, 2016-04-07 19:48:21]

Description was changed from

==========
Remove several domains from the HSTS preload list and fix a trailing space.

videomail.io:
> I mistakenly used this code for helmet, a npm package to set various
> HTTP headers:
>
> ```
>         app.use(helmet.hsts({
>           maxAge:            108864000000, // Must be at least 18 weeks to be
approved by Google
>           preload:           true
>         }))
> ```
>
> But now, I can't visit the local site with plain HTTP anymore. I need
> that for some tests.

tablotv.com:
> No one from our organization (we are small) added our domain to the list and
> according to the documentation on the HSTS preload site it may take many
> revisions to be removed from the list.
> ...
> As for how it happened, we are not sure.

involved-it.be:
> Several months ago I (accidently) added involved-it.be to the HSTS
> preload list presumably via https://hstspreload.appspot.com/.

BUG=527947
==========

to

==========
Remove several domains from the HSTS preload list and remove an extra space.

videomail.io:
> I mistakenly used this code for helmet, a npm package to set various
> HTTP headers:
>
> ```
>         app.use(helmet.hsts({
>           maxAge:            108864000000, // Must be at least 18 weeks to be
approved by Google
>           preload:           true
>         }))
> ```
>
> But now, I can't visit the local site with plain HTTP anymore. I need
> that for some tests.

tablotv.com:
> No one from our organization (we are small) added our domain to the list and
> according to the documentation on the HSTS preload site it may take many
> revisions to be removed from the list.
> ...
> As for how it happened, we are not sure.

involved-it.be:
> Several months ago I (accidently) added involved-it.be to the HSTS
> preload list presumably via https://hstspreload.appspot.com/.

bam.com.au: A mail subdomain hosted by a third-party does not support SSL.

logotype.se:
> The reason is that I do development, and for some subdomains I don't
> have TLS setup on the different server instances.

BUG=527947
==========

[lgarron, 2016-04-07 19:55:18]

Description was changed from

==========
Remove several domains from the HSTS preload list and remove an extra space.

videomail.io:
> I mistakenly used this code for helmet, a npm package to set various
> HTTP headers:
>
> ```
>         app.use(helmet.hsts({
>           maxAge:            108864000000, // Must be at least 18 weeks to be
approved by Google
>           preload:           true
>         }))
> ```
>
> But now, I can't visit the local site with plain HTTP anymore. I need
> that for some tests.

tablotv.com:
> No one from our organization (we are small) added our domain to the list and
> according to the documentation on the HSTS preload site it may take many
> revisions to be removed from the list.
> ...
> As for how it happened, we are not sure.

involved-it.be:
> Several months ago I (accidently) added involved-it.be to the HSTS
> preload list presumably via https://hstspreload.appspot.com/.

bam.com.au: A mail subdomain hosted by a third-party does not support SSL.

logotype.se:
> The reason is that I do development, and for some subdomains I don't
> have TLS setup on the different server instances.

BUG=527947
==========

to

==========
Remove several domains from the HSTS preload list and remove an extra space.

videomail.io:
> I mistakenly used this code for helmet, a npm package to set various
> HTTP headers:
>
> ```
>         app.use(helmet.hsts({
>           maxAge:            108864000000, // Must be at least 18 weeks to be
approved by Google
>           preload:           true
>         }))
> ```
>
> But now, I can't visit the local site with plain HTTP anymore. I need
> that for some tests.

tablotv.com:
> No one from our organization (we are small) added our domain to the list and
> according to the documentation on the HSTS preload site it may take many
> revisions to be removed from the list.
> ...
> As for how it happened, we are not sure.

involved-it.be:
> Several months ago I (accidently) added involved-it.be to the HSTS
> preload list presumably via https://hstspreload.appspot.com/.

bam.com.au: A mail subdomain hosted by a third-party does not support SSL.

logotype.se:
> The reason is that I do development, and for some subdomains I don't
> have TLS setup on the different server instances.

BUG=527947
TBR=palmer@chromium.org
==========

[lgarron, 2016-04-07 19:55:19]

The CQ bit was checked by lgarron@chromium.org

[commit-bot: I haz the power, 2016-04-07 19:55:46]

CQ is trying da patch. Follow status at
 https://chromium-cq-status.appspot.com/patch-status/1814053002/50001
View timeline at
 https://chromium-cq-status.appspot.com/patch-timeline/1814053002/50001

[commit-bot: I haz the power, 2016-04-07 21:12:13]

Committed patchset #4 (id:50001)

[lgarron, 2016-04-07 21:29:07]

Description was changed from

==========
Remove several domains from the HSTS preload list and remove an extra space.

videomail.io:
> I mistakenly used this code for helmet, a npm package to set various
> HTTP headers:
>
> ```
>         app.use(helmet.hsts({
>           maxAge:            108864000000, // Must be at least 18 weeks to be
approved by Google
>           preload:           true
>         }))
> ```
>
> But now, I can't visit the local site with plain HTTP anymore. I need
> that for some tests.

tablotv.com:
> No one from our organization (we are small) added our domain to the list and
> according to the documentation on the HSTS preload site it may take many
> revisions to be removed from the list.
> ...
> As for how it happened, we are not sure.

involved-it.be:
> Several months ago I (accidently) added involved-it.be to the HSTS
> preload list presumably via https://hstspreload.appspot.com/.

bam.com.au: A mail subdomain hosted by a third-party does not support SSL.

logotype.se:
> The reason is that I do development, and for some subdomains I don't
> have TLS setup on the different server instances.

BUG=527947
TBR=palmer@chromium.org
==========

to

==========
Remove several domains from the HSTS preload list and remove an extra space.

videomail.io:
> I mistakenly used this code for helmet, a npm package to set various
> HTTP headers:
>
> ```
>         app.use(helmet.hsts({
>           maxAge:            108864000000, // Must be at least 18 weeks to be
approved by Google
>           preload:           true
>         }))
> ```
>
> But now, I can't visit the local site with plain HTTP anymore. I need
> that for some tests.

tablotv.com:
> No one from our organization (we are small) added our domain to the list and
> according to the documentation on the HSTS preload site it may take many
> revisions to be removed from the list.
> ...
> As for how it happened, we are not sure.

involved-it.be:
> Several months ago I (accidently) added involved-it.be to the HSTS
> preload list presumably via https://hstspreload.appspot.com/.

bam.com.au: A mail subdomain hosted by a third-party does not support SSL.

logotype.se:
> The reason is that I do development, and for some subdomains I don't
> have TLS setup on the different server instances.

BUG=527947, 601561
TBR=palmer@chromium.org
==========

[commit-bot: I haz the power, 2016-04-07 21:29:22]

Description was changed from

==========
Remove several domains from the HSTS preload list and remove an extra space.

videomail.io:
> I mistakenly used this code for helmet, a npm package to set various
> HTTP headers:
>
> ```
>         app.use(helmet.hsts({
>           maxAge:            108864000000, // Must be at least 18 weeks to be
approved by Google
>           preload:           true
>         }))
> ```
>
> But now, I can't visit the local site with plain HTTP anymore. I need
> that for some tests.

tablotv.com:
> No one from our organization (we are small) added our domain to the list and
> according to the documentation on the HSTS preload site it may take many
> revisions to be removed from the list.
> ...
> As for how it happened, we are not sure.

involved-it.be:
> Several months ago I (accidently) added involved-it.be to the HSTS
> preload list presumably via https://hstspreload.appspot.com/.

bam.com.au: A mail subdomain hosted by a third-party does not support SSL.

logotype.se:
> The reason is that I do development, and for some subdomains I don't
> have TLS setup on the different server instances.

BUG=527947, 601561
TBR=palmer@chromium.org
==========

to

==========
Remove several domains from the HSTS preload list and remove an extra space.

videomail.io:
> I mistakenly used this code for helmet, a npm package to set various
> HTTP headers:
>
> ```
>         app.use(helmet.hsts({
>           maxAge:            108864000000, // Must be at least 18 weeks to be
approved by Google
>           preload:           true
>         }))
> ```
>
> But now, I can't visit the local site with plain HTTP anymore. I need
> that for some tests.

tablotv.com:
> No one from our organization (we are small) added our domain to the list and
> according to the documentation on the HSTS preload site it may take many
> revisions to be removed from the list.
> ...
> As for how it happened, we are not sure.

involved-it.be:
> Several months ago I (accidently) added involved-it.be to the HSTS
> preload list presumably via https://hstspreload.appspot.com/.

bam.com.au: A mail subdomain hosted by a third-party does not support SSL.

logotype.se:
> The reason is that I do development, and for some subdomains I don't
> have TLS setup on the different server instances.

BUG=527947
TBR=palmer@chromium.org

Committed: https://crrev.com/253102d2f4b59a803816d2567233a5823ab5d782
Cr-Commit-Position: refs/heads/master@{#385850}
==========

[commit-bot: I haz the power, 2016-04-07 21:29:23]

Patchset 4 (id:??) landed as
https://crrev.com/253102d2f4b59a803816d2567233a5823ab5d782
Cr-Commit-Position: refs/heads/master@{#385850}