Require HTTPS for crbug.com.

net/http/transport_security_state_static.json

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 // This file contains the HSTS preloaded list in a machine readable format.
 
 // The top-level element is a dictionary with two keys: "pinsets" maps details
 // of certificate pinning to a name and "entries" contains the HSTS details for
 // each host.
 //
@@ skipping 757 matching lines @@
     { "name": "harvestapp.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "anycoin.me", "include_subdomains": true, "mode": "force-https" },
     { "name": "noexpect.org", "include_subdomains": true, "mode": "force-https" },
     { "name": "airbnb.com", "mode": "force-https" },
     { "name": "www.airbnb.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "usaa.com", "mode": "force-https" },
     { "name": "www.usaa.com", "mode": "force-https" },
     { "name": "mobile.usaa.com", "mode": "force-https" },
     { "name": "subrosa.io", "include_subdomains": true, "mode": "force-https" },
     { "name": "detectify.com", "mode": "force-https" },
+    { "name": "crbug.com", "include_subdomains": true, "mode": "force-https" },

[Peter Kasting, 2014/05/28 18:57:23]

Shouldn't this go in the "Other Google-related domains that must use HTTPS"
section like codereview.chromium.org does?

Also, is there any chance we can alphabetize the entries in these lists, or
something?  The current ordering (or lack thereof) seems like a problem.

[engedy, 2014/05/28 20:57:57]

The domains in the two Google-related groups all have pinned certs, this one
cannot, therefore Adam preferred to have this down here.

I agree that we should alphabetize this.
 
On 2014/05/28 18:57:23, Peter Kasting wrote:

 
     // Entries that are only valid if the client supports SNI.
     { "name": "gmail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "googlemail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "www.gmail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "www.googlemail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "google-analytics.com", "include_subdomains": true, "pins": "google", "snionly": true },
     { "name": "googlegroups.com", "include_subdomains": true, "pins": "google", "snionly": true },
     { "name": "mykolab.com", "include_subdomains": true, "mode": "force-https", "snionly": true },
     { "name": "semenkovich.com", "include_subdomains": true, "mode": "force-https", "snionly": true }
   ]
 }