search

chromium / hstspreload

🔒🔍 A Go package to scan sites against requirements for Chromium-maintained HSTS preload list.
https://hstspreload.org
BSD 3-Clause "New" or "Revised" License
115 stars 37 forks source link

Fold the HSTS "manual" review into hstspreload.appspot.com #1

Closed lgarron closed 8 years ago

lgarron commented 8 years ago

From https://crbug.com/587957

agl@ and I actually use an automated script to do what used to be the manual review for HSTS preload list submissions. The code is Google-internal at the moment [1].

Since this review is run manually at irregular intervals, this results in:

  • A slower, uncertain feedback cycle on HSTS preload submissions.
  • Extra work for the preload list maintainer (currently me) due to manual emails regarding rejections.

I want to run this review step automatically for hstspreload.appspot.com submissions. AppEngine can't do this, so this requires spinning up a GCE instance and integrating hsts-review.go into the AppEngine code.

[1] https://goto.google.com/hsts-review.go

lgarron commented 8 years ago

This is almost done. It is now tracked in https://github.com/chromium/hstspreload.appspot.com