hsts-preload


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106

force_https = bitbucket.org
force_https = re:^(www\.)?bitrig\.org$
force_https = .conformal.com
force_https = .conformalsys.org
force_https = .cyphertite.com
force_https = .defcon.org
force_https = duck.co
force_https = .eff.org
force_https = github.com
force_https = gist.github.com
force_https = bugzilla.gnome.org
force_https = lobste.rs
force_https = .bugzilla.mozilla.org
force_https = mtgox.com
force_https = gitweb.torproject.org

# sites from chromium's preloaded HSTS list
# http://src.chromium.org/viewvc/chrome/trunk/src/net/base/transport_security_state_static.json?view=markup
force_https = re:^(.*\.)*(health|checkout|chrome|docs|sites|spreadsheets|appengine|encrypted|accounts|profiles|mail|talkgadget|talk|hostedtalkgadget|plus|script)\.google\.com$
force_https = .market.android.com
force_https = .ssl.google-analytics.com
force_https = .googleplex.com
force_https = .chromiumcodereview.appspot.com
force_https = .codereview.appspot.com
force_https = www.paypal.com
force_https = www.elanex.biz
force_https = .jottit.com
force_https = .sunshinepress.org
force_https = www.noisebridge.net
force_https = .neg9.org
force_https = .riseup.net
force_https = factor.cc
force_https = re:^(members|support|id|lists)\.mayfirst\.org$
force_https = aladdinschools.appspot.com
force_https = .ottospora.nl
force_https = www.paycheckrecords.com
force_https = re:^(www\.)?lastpass\.com$
force_https = .keyerror.com
force_https = re:^(www\.)?entropia\.de$
force_https = .romab.com
force_https = re:^(www\.)?logentries\.com$
force_https = .stripe.com
force_https = .cloudsecurityalliance.org
force_https = .login.sapo.pt
force_https = .mattmccutchen.net
force_https = .betnet.fr
force_https = .uprotect.it
force_https = squareup.com
force_https = .cert.se
force_https = .crypto.is
force_https = .simon.butcher.name
force_https = .linx.net
force_https = re:^(www\.)?dropcam\.com$
force_https = .ebanking.indovinabank.com.vn
force_https = epoxate.com
force_https = torproject.org
force_https = .blog.torproject.org
force_https = .check.torproject.org
force_https = .www.torproject.org
force_https = .www.moneybookers.com
force_https = re:^(www\.)?ledgerscope\.net$
force_https = re:^(www\.)?kyps\.net$
force_https = re:^(.*\.)*(app|api)\.recurly\.com$
force_https = re:^(www\.)?greplin\.com$
force_https = .luneta.nearbuysystems.com
force_https = .ubertt.org
force_https = .pixi.me
force_https = .grepular.com
force_https = re:^(www\.)?(developer\.|sandbox\.)?mydigipass\.com$
force_https = .crypto.cat
force_https = .bigshinylock.minazo.net
force_https = .crate.io
force_https = twitter.com
force_https = .www.twitter.com
force_https = .braintreegateway.com
force_https = re:^(www\.)?braintreepayments\.com$
force_https = emailprivacytester.com
force_https = .business.medbank.com.mt
force_https = .arivo.com.br
force_https = .www.apollo-auto.com
force_https = .www.cueup.com
force_https = re:^(www\.)?jitsi\.org$
force_https = download.jitsi.org
force_https = .sol.io
force_https = re:^(www\.)?irccloud\.com$
force_https = alpha.irccloud.com
force_https = .passwd.io
force_https = .browserid.org
force_https = .login.persona.org
force_https = re:^(www\.|shops\.)?neonisi\.com$
force_https = .piratenlogin.de
force_https = .howrandom.org
force_https = re:^((api|www)\.)?intercom\.io$
force_https = .fatzebra.com.au
force_https = .csawctf.poly.edu
force_https = re:^(www\.)?makeyourlaws\.org$
force_https = .iop.intuit.com
force_https = re:^(www\.)?surfeasy\.com$
force_https = packagist.org
force_https = re:^(www\.|dm\.)?(my)?lookout.com$
force_https = .itriskltd.com
force_https = .stocktrade.de
force_https = .rhcloud.com
force_https = .openshift.redhat.com
force_https = re:^(www\.)?gmail\.com$
force_https = re:^(www\.)?googlemail\.com$