Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(63)

Side by Side Diff: net/http/transport_security_state_static.json

Issue 88913003: Revert: "net: don't allow SSLv3 fallback for Google properties." (Closed) Base URL: svn://svn.chromium.org/chrome/trunk/src
Patch Set: Created 7 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch | Annotate | Revision Log
« no previous file with comments | « net/http/transport_security_state_static.h ('k') | no next file » | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 // This file contains the HSTS preloaded list in a machine readable format. 5 // This file contains the HSTS preloaded list in a machine readable format.
6 6
7 // The top-level element is a dictionary with two keys: "pinsets" maps details 7 // The top-level element is a dictionary with two keys: "pinsets" maps details
8 // of certificate pinning to a name and "entries" contains the HSTS details for 8 // of certificate pinning to a name and "entries" contains the HSTS details for
9 // each host. 9 // each host.
10 // 10 //
(...skipping 182 matching lines...) Expand 10 before | Expand all | Expand 10 after
193 { "name": "codereview.chromium.org", "include_subdomains": true, "mode": "fo rce-https", "pins": "google" }, 193 { "name": "codereview.chromium.org", "include_subdomains": true, "mode": "fo rce-https", "pins": "google" },
194 { "name": "code.google.com", "include_subdomains": true, "mode": "force-http s", "pins": "google" }, 194 { "name": "code.google.com", "include_subdomains": true, "mode": "force-http s", "pins": "google" },
195 { "name": "googlecode.com", "include_subdomains": true, "pins": "google" }, 195 { "name": "googlecode.com", "include_subdomains": true, "pins": "google" },
196 { "name": "dl.google.com", "include_subdomains": true, "mode": "force-https" , "pins": "google" }, 196 { "name": "dl.google.com", "include_subdomains": true, "mode": "force-https" , "pins": "google" },
197 { "name": "translate.googleapis.com", "include_subdomains": true, "mode": "f orce-https", "pins": "google" }, 197 { "name": "translate.googleapis.com", "include_subdomains": true, "mode": "f orce-https", "pins": "google" },
198 198
199 // chart.apis.google.com is *not* HSTS because the certificate doesn't match 199 // chart.apis.google.com is *not* HSTS because the certificate doesn't match
200 // and there are lots of links out there that still use the name. The correc t 200 // and there are lots of links out there that still use the name. The correc t
201 // hostname for this is chart.googleapis.com. 201 // hostname for this is chart.googleapis.com.
202 { "name": "chart.apis.google.com", "include_subdomains": true, "pins": "goog le" }, 202 { "name": "chart.apis.google.com", "include_subdomains": true, "pins": "goog le" },
203 { "name": "oraprodsso.corp.google.com", "include_subdomains": true, "mode": "force-https" },
204 { "name": "oraprodmv.corp.google.com", "include_subdomains": true, "mode": " force-https" },
205 203
206 // Other Google-related domains that must use an acceptable certificate 204 // Other Google-related domains that must use an acceptable certificate
207 // iff using SSL. 205 // iff using SSL.
208 { "name": "ytimg.com", "include_subdomains": true, "pins": "google" }, 206 { "name": "ytimg.com", "include_subdomains": true, "pins": "google" },
209 { "name": "googleusercontent.com", "include_subdomains": true, "pins": "goog le" }, 207 { "name": "googleusercontent.com", "include_subdomains": true, "pins": "goog le" },
210 { "name": "youtube.com", "include_subdomains": true, "pins": "google" }, 208 { "name": "youtube.com", "include_subdomains": true, "pins": "google" },
211 { "name": "googleapis.com", "include_subdomains": true, "pins": "google" }, 209 { "name": "googleapis.com", "include_subdomains": true, "pins": "google" },
212 { "name": "googleadservices.com", "include_subdomains": true, "pins": "googl e" }, 210 { "name": "googleadservices.com", "include_subdomains": true, "pins": "googl e" },
213 { "name": "appspot.com", "include_subdomains": true, "pins": "google" }, 211 { "name": "appspot.com", "include_subdomains": true, "pins": "google" },
214 { "name": "googlesyndication.com", "include_subdomains": true, "pins": "goog le" }, 212 { "name": "googlesyndication.com", "include_subdomains": true, "pins": "goog le" },
(...skipping 450 matching lines...) Expand 10 before | Expand all | Expand 10 after
665 663
666 // Entries that are only valid if the client supports SNI. 664 // Entries that are only valid if the client supports SNI.
667 { "name": "gmail.com", "mode": "force-https", "pins": "google", "snionly": t rue }, 665 { "name": "gmail.com", "mode": "force-https", "pins": "google", "snionly": t rue },
668 { "name": "googlemail.com", "mode": "force-https", "pins": "google", "snionl y": true }, 666 { "name": "googlemail.com", "mode": "force-https", "pins": "google", "snionl y": true },
669 { "name": "www.gmail.com", "mode": "force-https", "pins": "google", "snionly ": true }, 667 { "name": "www.gmail.com", "mode": "force-https", "pins": "google", "snionly ": true },
670 { "name": "www.googlemail.com", "mode": "force-https", "pins": "google", "sn ionly": true }, 668 { "name": "www.googlemail.com", "mode": "force-https", "pins": "google", "sn ionly": true },
671 { "name": "google-analytics.com", "include_subdomains": true, "pins": "googl e", "snionly": true }, 669 { "name": "google-analytics.com", "include_subdomains": true, "pins": "googl e", "snionly": true },
672 { "name": "googlegroups.com", "include_subdomains": true, "pins": "google", "snionly": true } 670 { "name": "googlegroups.com", "include_subdomains": true, "pins": "google", "snionly": true }
673 ] 671 ]
674 } 672 }
OLDNEW
« no previous file with comments | « net/http/transport_security_state_static.h ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698