about summary refs log tree commit diff stats
path: root/Makefile
diff options
context:
space:
mode:
authorJosh Rickmar <jrick@devio.us>2012-07-31 09:55:26 -0400
committerJosh Rickmar <jrick@devio.us>2012-07-31 09:55:26 -0400
commit0c240f728d489408cda135786cf29244c1cd4d83 (patch)
treee063f765a1c73d301ec3ad5e8a5904165337a63e /Makefile
parent02e03fcb67ee3ee37ff7bd5f287a7c53ca55f97e (diff)
downloadxombrero-0c240f728d489408cda135786cf29244c1cd4d83.tar.gz
Add a force_https setting (using the same domain syntax as the
whitelist settings) to make all requests to that domain use the HTTPS
scheme, similar to HSTS.

Install a new file, hsts-preload, into the resource dir.  This is a
regular config file with a bunch of force_https = ... lines, which is
used to implement a preloaded HSTS list.  Right now all the domains in
this file, except for conformal.com and cyphertite.com, are taken
directly from chromium's preloaded HSTS list (and should be synced
with this file every so often).  Also implement a new setting,
preload_strict_transport (enabled by default), to enable or disable
the loading of this preloaded HSTS list.  Document force_https and
preload_strict_transport in the manpage.
Diffstat (limited to 'Makefile')
-rw-r--r--Makefile1
1 files changed, 1 insertions, 0 deletions
diff --git a/Makefile b/Makefile
index 5867dcb..e9ada1a 100644
--- a/Makefile
+++ b/Makefile
@@ -62,6 +62,7 @@ beforeinstall:
 	install -m 644 ${.CURDIR}/xombreroicon128.png ${PREFIX}/share/xombrero
 	install -m 644 ${.CURDIR}/tld-rules ${PREFIX}/share/xombrero
 	install -m 644 ${.CURDIR}/style.css ${PREFIX}/share/xombrero
+	install -m 644 ${.CURDIR}/hsts-preload ${PREFIX}/share/xombrero
 
 ${PROG} ${OBJS} beforedepend: javascript.h