Front page: Indicate whether preloaded entries include subdomains.

chromium / hstspreload.org

:lock: Chromium's HSTS preload list submission website.

https://hstspreload.org

BSD 3-Clause "New" or "Revised" License

785 stars 92 forks source link

Front page: Indicate whether preloaded entries include subdomains. #107

Open lgarron opened 7 years ago

lgarron commented 7 years ago

e.g:

With subdomains: https://hstspreload.org/?domain=facebook.com
Without subdomains: https://hstspreload.org/?domain=youtube.com

lgarron commented 7 years ago

Note that this either requires the server to look at a recent version of the preload list, or to cache the information in the database.

ExE-Boss commented 7 years ago

Actually, the curl log for https://youtube.com indicates that the domain does indeed include subdomains now:

PS C:\> curl -IL https://youtube.com
HTTP/2 301
content-length: 0
location: https://www.youtube.com/
strict-transport-security: max-age=31536000; includeSubDomains; preload
date: Tue, 14 Nov 2017 05:52:57 GMT
content-type: text/html
server: YouTube Frontend Proxy
x-xss-protection: 1; mode=block
alt-svc: quic=":443"; ma=2592000; v="41,39,38,37,35"

lgarron commented 7 years ago

Actually, the curl log for https://youtube.com indicates that the domain does indeed include subdomains now:

Indeed! :-D

https://twitter.com/lgarron/status/920776629877534720

A current example is www.wordpress.com