about summary refs log tree commit diff stats
path: root/hsts-preload
Commit message (Collapse)AuthorAgeFilesLines
* Sync hsts-preload with chromium.Josh Rickmar2013-07-111-1/+8
|
* Sync hsts-preload and add the chromium revision we're last synced toJosh Rickmar2013-06-251-1/+8
|
* sync hsts-preload with chromiumJosh Rickmar2013-06-121-0/+1
|
* sync hsts-preload with chromiumJosh Rickmar2013-06-101-3/+4
| | | | update link to moved version of chromium's json file
* sync hsts-preload with chromium treeJosh Rickmar2013-06-061-4/+36
|
* Sync preloaded HSTS with chromiumJosh Rickmar2012-10-281-3/+10
|
* Add regex support to whitelistsJosh Rickmar2012-09-181-61/+20
| | | | | | | | | | | | | | This modifies the whitelist and https forcing code to internally use unix extended regular expressions to match domains. The old config syntax converted to an appropiate regular expression. Inputing of raw regular expressions is possible by prepending the string "re:" in front of a regular expression, for example: js_wl = re:^(.*\.)*cyphertite\.com$ would be the same as js_wl = .cyphertite.com
* Sync preloaded hsts with chromiumJosh Rickmar2012-09-151-0/+5
|
* Sync preloaded HSTS with ChromiumJosh Rickmar2012-08-281-1/+3
|
* Sync preloaded HSTS with chromiumJosh Rickmar2012-08-251-0/+2
|
* Also add www.bitrig.org to preloaded hstsJosh Rickmar2012-08-151-0/+1
|
* Bitrig mirrors aren't https, don't include subdomains in hstsJosh Rickmar2012-08-151-1/+1
|
* Sync preloaded HSTS with ChromiumJosh Rickmar2012-08-141-0/+1
|
* Sync preloaded HSTS list with ChromiumJosh Rickmar2012-08-061-0/+5
|
* Re-add more google domains to the preloaded HSTS list. AccidentlyJosh Rickmar2012-07-311-0/+16
| | | | | removed these earlier as we had .google.com, which was later removed as .google.com was only there for cert pinning.
* Add a force_https setting (using the same domain syntax as theJosh Rickmar2012-07-311-0/+108
whitelist settings) to make all requests to that domain use the HTTPS scheme, similar to HSTS. Install a new file, hsts-preload, into the resource dir. This is a regular config file with a bunch of force_https = ... lines, which is used to implement a preloaded HSTS list. Right now all the domains in this file, except for conformal.com and cyphertite.com, are taken directly from chromium's preloaded HSTS list (and should be synced with this file every so often). Also implement a new setting, preload_strict_transport (enabled by default), to enable or disable the loading of this preloaded HSTS list. Document force_https and preload_strict_transport in the manpage.