Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(539)

Issue 2649223002: HSTS preload list removals for Chrome 58. (Closed)

Created:
3 years, 11 months ago by lgarron
Modified:
3 years, 9 months ago
Reviewers:
CC:
cbentzel+watch_chromium.org, chromium-reviews
Target Ref:
refs/pending/heads/master
Project:
chromium
Visibility:
Public.

Description

HSTS preload list removals for Chrome 58. safic.net: > • [oakwood] - audio stream server will not properly support https, oversite on > configuration preload and subdomains have been removed from headers. medwayindia.com: > We cannot support HTTPS on domain and we are removing it since our website > provides only information and doesn't have payment or login functions that > would require SSL. > > It was a mistake installing SSL which is not actually required by our static > information purpose website. sangwon.org: > My blog service cannot support https whiskeyriver.co.uk: > the reason for this is that I have recently taken over this domain, which I > have since discovered used to go to an https and is preloaded into the HSTS > list, but my brand new [and far superior] band website is created by Weebly, > http only and therefore will not work using this domain [it has been the > band’s domain for the last 9 years]. To add SSL to my new site so it will > work would cost more than the band can afford and so I am humbly asking if > you could remove it jf.duckdns.org: > This website is a dynamic DNS site hosted on my Raspberry Pi... I was just > testing SSL on my site and enabled HSTS (recommended by ssllabs site tester) > without being fully aware of the implications. I have since removed this > header in my apache conf however as you can see it's in the Chrome preload > list. avril4th.com: > *.avril4th.com - This is blog which I take care of. However, it was moved to a > naver blog (I was against that, but it's not my decision), which does not > support https. At all. builtritetrailerplans.com: > No longer have ssl on [builtritetrailerplans.com] we have moved to > builtritetrailerplans.com.au x-case.de: > [Subdomain with] Local SAP System with public DNS BUG=655854 TBR=palmer@chromium.org

Patch Set 1 #

Patch Set 2 : HSTS preload list removals for Chrome 58. #

Patch Set 3 : HSTS preload list removals for Chrome 58. #

Patch Set 4 : HSTS preload list removals for Chrome 58. #

Patch Set 5 : HSTS preload list removals for Chrome 58. #

Patch Set 6 : HSTS preload list removals for Chrome 58. #

Unified diffs Side-by-side diffs Delta from patch set Stats (+0 lines, -8 lines) Patch
M net/http/transport_security_state_static.json View 1 2 3 4 5 8 chunks +0 lines, -8 lines 0 comments Download

Messages

Total messages: 4 (3 generated)
lgarron
3 years, 9 months ago (2017-03-02 03:23:48 UTC) #3
Message was sent while issue was closed.
Committed patchset #6 (id:90001) manually as
a739725e13c66cd34417847fb9f4a08854a5902f.

Powered by Google App Engine
This is Rietveld 408576698