Commit Graph

6 Commits

Author SHA1 Message Date
Pale Moon 0fa753f690 Update HSTS preload list generation script.
Previous behavior: if an entry was in the previously-used list, and there would be an error connecting to or processing the host, it would adopt it using the previous status, with a new minimum required max age TTL.
New behavior: if an entry is in the previously-used list, and there is an error connecting to or processing the host, it will be dropped from the preload list.

The old behavior would allow entries to persist on the HSTS preload list when they drop off the 'net. Considering domain churn, it would cause issues for new owners for having a persisted HSTS entry preloaded in the browser.
Bonus: it keeps our HSTS preload list lean.
2018-07-25 09:20:24 +08:00
Pale Moon c60bd2e25e HSTS preload list update.
Also increases the concurrent lookups to 15.
Tag #62.
2018-07-25 07:17:35 +08:00
Pale Moon 972b14bd7b Remove preloading of domain PKPins Part 1
- Remove static lists
- Remove tools to generate static lists
- Remove no longer used structs

Tag #925
2018-07-25 07:11:06 +08:00
Pale Moon b142256756 Update list of known CA root hashes 2018-07-25 01:05:11 +08:00
trav90 d07f653690 Remove FF references in getHSTSPreloadList.js 2018-07-24 23:39:50 +08:00
Moonchild baf46a6bf1 Merge pull request #1 from mozilla/esr38: Esr38 upstream pull 2018-07-24 23:04:07 +08:00