Skip to content
Tim Rühsen edited this page Nov 13, 2015 · 2 revisions

I read about Mozilla and Chromium HSTS preloaded lists...

Mozilla HSTS preloaded list

Chromium HSTS preloaded list

Maybe we can simplify our HSTS code to also not care for the port number ? (WDYT?)

Also, we should check that we only take HSTS into account when using correctly checked HTTPS connections.

Let's write a small script to import Mozilla and Chromium preloaded lists and generate our own. WDYT ?