OLD | NEW |
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 // This file contains the HSTS preloaded list in a machine readable format. | 5 // This file contains the HSTS preloaded list in a machine readable format. |
6 | 6 |
7 // The top-level element is a dictionary with two keys: "pinsets" maps details | 7 // The top-level element is a dictionary with two keys: "pinsets" maps details |
8 // of certificate pinning to a name and "entries" contains the HSTS details for | 8 // of certificate pinning to a name and "entries" contains the HSTS details for |
9 // each host. | 9 // each host. |
10 // | 10 // |
(...skipping 200 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
211 { "name": "goto.google.com", "include_subdomains": true, "mode": "force-http
s", "pins": "google" }, | 211 { "name": "goto.google.com", "include_subdomains": true, "mode": "force-http
s", "pins": "google" }, |
212 { "name": "cloud.google.com", "include_subdomains": true, "mode": "force-htt
ps", "pins": "google" }, | 212 { "name": "cloud.google.com", "include_subdomains": true, "mode": "force-htt
ps", "pins": "google" }, |
213 { "name": "glass.google.com", "include_subdomains": true, "mode": "force-htt
ps", "pins": "google" }, | 213 { "name": "glass.google.com", "include_subdomains": true, "mode": "force-htt
ps", "pins": "google" }, |
214 { "name": "admin.google.com", "include_subdomains": true, "mode": "force-htt
ps", "pins": "google" }, | 214 { "name": "admin.google.com", "include_subdomains": true, "mode": "force-htt
ps", "pins": "google" }, |
215 { "name": "login.corp.google.com", "include_subdomains": true, "mode": "forc
e-https", "pins": "google" }, | 215 { "name": "login.corp.google.com", "include_subdomains": true, "mode": "forc
e-https", "pins": "google" }, |
216 // play.google.com doesn't have include_subdomains because of crbug.com/3278
34. | 216 // play.google.com doesn't have include_subdomains because of crbug.com/3278
34. |
217 { "name": "play.google.com", "mode": "force-https", "pins": "google" }, | 217 { "name": "play.google.com", "mode": "force-https", "pins": "google" }, |
218 { "name": "passwords.google.com", "include_subdomains": true, "mode": "force
-https", "pins": "google" }, | 218 { "name": "passwords.google.com", "include_subdomains": true, "mode": "force
-https", "pins": "google" }, |
219 | 219 |
220 // Other Google-related domains that must use HTTPS. | 220 // Other Google-related domains that must use HTTPS. |
| 221 { "name": "gmail.com", "mode": "force-https", "pins": "google" }, |
| 222 { "name": "googlemail.com", "mode": "force-https", "pins": "google" }, |
| 223 { "name": "www.gmail.com", "mode": "force-https", "pins": "google" }, |
| 224 { "name": "www.googlemail.com", "mode": "force-https", "pins": "google" }, |
221 { "name": "market.android.com", "include_subdomains": true, "mode": "force-h
ttps", "pins": "google" }, | 225 { "name": "market.android.com", "include_subdomains": true, "mode": "force-h
ttps", "pins": "google" }, |
222 { "name": "ssl.google-analytics.com", "include_subdomains": true, "mode": "f
orce-https", "pins": "google" }, | 226 { "name": "ssl.google-analytics.com", "include_subdomains": true, "mode": "f
orce-https", "pins": "google" }, |
223 { "name": "drive.google.com", "include_subdomains": true, "mode": "force-htt
ps", "pins": "google" }, | 227 { "name": "drive.google.com", "include_subdomains": true, "mode": "force-htt
ps", "pins": "google" }, |
224 { "name": "googleplex.com", "include_subdomains": true, "mode": "force-https
", "pins": "google" }, | 228 { "name": "googleplex.com", "include_subdomains": true, "mode": "force-https
", "pins": "google" }, |
225 { "name": "groups.google.com", "include_subdomains": true, "mode": "force-ht
tps", "pins": "google" }, | 229 { "name": "groups.google.com", "include_subdomains": true, "mode": "force-ht
tps", "pins": "google" }, |
226 { "name": "apis.google.com", "include_subdomains": true, "mode": "force-http
s", "pins": "google" }, | 230 { "name": "apis.google.com", "include_subdomains": true, "mode": "force-http
s", "pins": "google" }, |
227 { "name": "chromiumcodereview.appspot.com", "include_subdomains": true, "mod
e": "force-https", "pins": "google" }, | 231 { "name": "chromiumcodereview.appspot.com", "include_subdomains": true, "mod
e": "force-https", "pins": "google" }, |
228 { "name": "chrome-devtools-frontend.appspot.com", "include_subdomains": true
, "mode": "force-https", "pins": "google" }, | 232 { "name": "chrome-devtools-frontend.appspot.com", "include_subdomains": true
, "mode": "force-https", "pins": "google" }, |
229 { "name": "codereview.appspot.com", "include_subdomains": true, "mode": "for
ce-https", "pins": "google" }, | 233 { "name": "codereview.appspot.com", "include_subdomains": true, "mode": "for
ce-https", "pins": "google" }, |
230 { "name": "codereview.chromium.org", "include_subdomains": true, "mode": "fo
rce-https", "pins": "google" }, | 234 { "name": "codereview.chromium.org", "include_subdomains": true, "mode": "fo
rce-https", "pins": "google" }, |
(...skipping 18 matching lines...) Expand all Loading... |
249 { "name": "wf-training-master.appspot.com", "include_subdomains": true, "mod
e": "force-https", "pins": "google" }, | 253 { "name": "wf-training-master.appspot.com", "include_subdomains": true, "mod
e": "force-https", "pins": "google" }, |
250 { "name": "wf-dogfood-hrd.appspot.com", "include_subdomains": true, "mode":
"force-https", "pins": "google" }, | 254 { "name": "wf-dogfood-hrd.appspot.com", "include_subdomains": true, "mode":
"force-https", "pins": "google" }, |
251 | 255 |
252 // chart.apis.google.com is *not* HSTS because the certificate doesn't match | 256 // chart.apis.google.com is *not* HSTS because the certificate doesn't match |
253 // and there are lots of links out there that still use the name. The correc
t | 257 // and there are lots of links out there that still use the name. The correc
t |
254 // hostname for this is chart.googleapis.com. | 258 // hostname for this is chart.googleapis.com. |
255 { "name": "chart.apis.google.com", "include_subdomains": true, "pins": "goog
le" }, | 259 { "name": "chart.apis.google.com", "include_subdomains": true, "pins": "goog
le" }, |
256 | 260 |
257 // Other Google-related domains that must use an acceptable certificate | 261 // Other Google-related domains that must use an acceptable certificate |
258 // iff using SSL. | 262 // iff using SSL. |
| 263 { "name": "google-analytics.com", "include_subdomains": true, "pins": "googl
e" }, |
| 264 { "name": "googlegroups.com", "include_subdomains": true, "pins": "google" }
, |
259 { "name": "ytimg.com", "include_subdomains": true, "pins": "google" }, | 265 { "name": "ytimg.com", "include_subdomains": true, "pins": "google" }, |
260 { "name": "googleusercontent.com", "include_subdomains": true, "pins": "goog
le" }, | 266 { "name": "googleusercontent.com", "include_subdomains": true, "pins": "goog
le" }, |
261 { "name": "youtube.com", "include_subdomains": true, "pins": "google" }, | 267 { "name": "youtube.com", "include_subdomains": true, "pins": "google" }, |
262 { "name": "youtube-nocookie.com", "include_subdomains": true, "pins": "googl
e" }, | 268 { "name": "youtube-nocookie.com", "include_subdomains": true, "pins": "googl
e" }, |
263 { "name": "googleapis.com", "include_subdomains": true, "pins": "google" }, | 269 { "name": "googleapis.com", "include_subdomains": true, "pins": "google" }, |
264 { "name": "googleadservices.com", "include_subdomains": true, "pins": "googl
e" }, | 270 { "name": "googleadservices.com", "include_subdomains": true, "pins": "googl
e" }, |
265 { "name": "appspot.com", "include_subdomains": true, "pins": "google" }, | 271 { "name": "appspot.com", "include_subdomains": true, "pins": "google" }, |
266 { "name": "googlesyndication.com", "include_subdomains": true, "pins": "goog
le" }, | 272 { "name": "googlesyndication.com", "include_subdomains": true, "pins": "goog
le" }, |
267 { "name": "doubleclick.net", "include_subdomains": true, "pins": "google" }, | 273 { "name": "doubleclick.net", "include_subdomains": true, "pins": "google" }, |
268 { "name": "2mdn.net", "include_subdomains": true, "pins": "google" }, | 274 { "name": "2mdn.net", "include_subdomains": true, "pins": "google" }, |
(...skipping 903 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
1172 { "name": "reishunger.de", "include_subdomains": true, "mode": "force-https"
}, | 1178 { "name": "reishunger.de", "include_subdomains": true, "mode": "force-https"
}, |
1173 { "name": "salserocafe.com", "include_subdomains": true, "mode": "force-http
s" }, | 1179 { "name": "salserocafe.com", "include_subdomains": true, "mode": "force-http
s" }, |
1174 { "name": "samizdat.cz", "include_subdomains": true, "mode": "force-https" }
, | 1180 { "name": "samizdat.cz", "include_subdomains": true, "mode": "force-https" }
, |
1175 { "name": "sslmate.com", "include_subdomains": true, "mode": "force-https" }
, | 1181 { "name": "sslmate.com", "include_subdomains": true, "mode": "force-https" }
, |
1176 { "name": "steventress.com", "include_subdomains": true, "mode": "force-http
s" }, | 1182 { "name": "steventress.com", "include_subdomains": true, "mode": "force-http
s" }, |
1177 { "name": "tekshrek.com", "include_subdomains": true, "mode": "force-https"
}, | 1183 { "name": "tekshrek.com", "include_subdomains": true, "mode": "force-https"
}, |
1178 { "name": "temehu.com", "include_subdomains": true, "mode": "force-https" }, | 1184 { "name": "temehu.com", "include_subdomains": true, "mode": "force-https" }, |
1179 { "name": "tobias-kluge.de", "include_subdomains": true, "mode": "force-http
s" }, | 1185 { "name": "tobias-kluge.de", "include_subdomains": true, "mode": "force-http
s" }, |
1180 { "name": "vortexhobbies.com", "include_subdomains": true, "mode": "force-ht
tps" }, | 1186 { "name": "vortexhobbies.com", "include_subdomains": true, "mode": "force-ht
tps" }, |
1181 { "name": "willnorris.com", "include_subdomains": true, "mode": "force-https
" }, | 1187 { "name": "willnorris.com", "include_subdomains": true, "mode": "force-https
" }, |
| 1188 { "name": "mykolab.com", "include_subdomains": true, "mode": "force-https" }
, |
| 1189 { "name": "semenkovich.com", "include_subdomains": true, "mode": "force-http
s" }, |
| 1190 { "name": "rme.li", "mode": "force-https" }, |
| 1191 { "name": "www.rme.li", "mode": "force-https" }, |
1182 { "name": "aiticon.com", "include_subdomains": true, "mode": "force-https" }
, | 1192 { "name": "aiticon.com", "include_subdomains": true, "mode": "force-https" }
, |
1183 { "name": "aiticon.de", "include_subdomains": true, "mode": "force-https" }, | 1193 { "name": "aiticon.de", "include_subdomains": true, "mode": "force-https" }, |
1184 { "name": "anetaben.nl", "include_subdomains": true, "mode": "force-https" }
, | 1194 { "name": "anetaben.nl", "include_subdomains": true, "mode": "force-https" }
, |
1185 { "name": "annevankesteren.com", "include_subdomains": true, "mode": "force-
https" }, | 1195 { "name": "annevankesteren.com", "include_subdomains": true, "mode": "force-
https" }, |
1186 { "name": "annevankesteren.nl", "include_subdomains": true, "mode": "force-h
ttps" }, | 1196 { "name": "annevankesteren.nl", "include_subdomains": true, "mode": "force-h
ttps" }, |
1187 { "name": "annevankesteren.org", "include_subdomains": true, "mode": "force-
https" }, | 1197 { "name": "annevankesteren.org", "include_subdomains": true, "mode": "force-
https" }, |
1188 { "name": "barslecht.com", "include_subdomains": true, "mode": "force-https"
}, | 1198 { "name": "barslecht.com", "include_subdomains": true, "mode": "force-https"
}, |
1189 { "name": "barslecht.nl", "include_subdomains": true, "mode": "force-https"
}, | 1199 { "name": "barslecht.nl", "include_subdomains": true, "mode": "force-https"
}, |
1190 { "name": "blessnet.jp", "include_subdomains": true, "mode": "force-https" }
, | 1200 { "name": "blessnet.jp", "include_subdomains": true, "mode": "force-https" }
, |
1191 { "name": "cloudstoragemaus.com", "include_subdomains": true, "mode": "force
-https" }, | 1201 { "name": "cloudstoragemaus.com", "include_subdomains": true, "mode": "force
-https" }, |
(...skipping 19 matching lines...) Expand all Loading... |
1211 { "name": "thecustomizewindows.com", "include_subdomains": true, "mode": "fo
rce-https" }, | 1221 { "name": "thecustomizewindows.com", "include_subdomains": true, "mode": "fo
rce-https" }, |
1212 { "name": "uzstyle.com", "include_subdomains": true, "mode": "force-https" }
, | 1222 { "name": "uzstyle.com", "include_subdomains": true, "mode": "force-https" }
, |
1213 { "name": "weggeweest.nl", "include_subdomains": true, "mode": "force-https"
}, | 1223 { "name": "weggeweest.nl", "include_subdomains": true, "mode": "force-https"
}, |
1214 { "name": "whatwg.org", "include_subdomains": true, "mode": "force-https" }, | 1224 { "name": "whatwg.org", "include_subdomains": true, "mode": "force-https" }, |
1215 { "name": "when-release.ru", "include_subdomains": true, "mode": "force-http
s" }, | 1225 { "name": "when-release.ru", "include_subdomains": true, "mode": "force-http
s" }, |
1216 { "name": "xn--maraa-rta.org", "include_subdomains": true, "mode": "force-ht
tps" }, | 1226 { "name": "xn--maraa-rta.org", "include_subdomains": true, "mode": "force-ht
tps" }, |
1217 { "name": "otakurepublic.com", "include_subdomains": true, "mode": "force-ht
tps" }, | 1227 { "name": "otakurepublic.com", "include_subdomains": true, "mode": "force-ht
tps" }, |
1218 { "name": "mqas.net", "include_subdomains": true, "mode": "force-https" }, | 1228 { "name": "mqas.net", "include_subdomains": true, "mode": "force-https" }, |
1219 { "name": "dlc.viasinc.com", "include_subdomains": true, "mode": "force-http
s" }, | 1229 { "name": "dlc.viasinc.com", "include_subdomains": true, "mode": "force-http
s" }, |
1220 { "name": "www.viasinc.com", "include_subdomains": true, "mode": "force-http
s" }, | 1230 { "name": "www.viasinc.com", "include_subdomains": true, "mode": "force-http
s" }, |
1221 { "name": "viasinc.com", "mode": "force-https" }, | 1231 { "name": "viasinc.com", "mode": "force-https" } |
1222 | |
1223 // Entries that are only valid if the client supports SNI. | |
1224 { "name": "gmail.com", "mode": "force-https", "pins": "google", "snionly": t
rue }, | |
1225 { "name": "googlemail.com", "mode": "force-https", "pins": "google", "snionl
y": true }, | |
1226 { "name": "www.gmail.com", "mode": "force-https", "pins": "google", "snionly
": true }, | |
1227 { "name": "www.googlemail.com", "mode": "force-https", "pins": "google", "sn
ionly": true }, | |
1228 { "name": "google-analytics.com", "include_subdomains": true, "pins": "googl
e", "snionly": true }, | |
1229 { "name": "googlegroups.com", "include_subdomains": true, "pins": "google",
"snionly": true }, | |
1230 { "name": "mykolab.com", "include_subdomains": true, "mode": "force-https",
"snionly": true }, | |
1231 { "name": "semenkovich.com", "include_subdomains": true, "mode": "force-http
s", "snionly": true }, | |
1232 { "name": "rme.li", "mode": "force-https", "snionly": true }, | |
1233 { "name": "www.rme.li", "mode": "force-https", "snionly": true } | |
1234 ] | 1232 ] |
1235 } | 1233 } |
OLD | NEW |