Feature #8191

Get tails.boum.org on major browsers' HSTS preload list

Added by intrigeri 2014-10-31 18:24:58 . Updated 2017-03-16 11:15:46 .

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Infrastructure
Target version:
2018
Start date:
2014-10-31
Due date:
% Done:

100%

Feature Branch:
Type of work:
Communicate
Blueprint:

Starter:
Affected tool:
Deliverable for:

Description

http://tsyrklevich.net/2014/10/28/abusing-strict-transport-security/

Team: intrigeri, u

Subtasks

Feature #8192: Have HTTPS on all the subdomains of tails.boum.org Resolved

100
Feature #9102: Get tails.boum.org on the Chrome HSTS preload list Resolved

100

Related issues

Related to Tails - Feature #9027: Add our website to Firefox' hardcoded Public Key Pinning ("static pins") Rejected 2015-03-06
Blocks Tails - Feature #10558: Distribute a copy of UUI over a website with HSTS preload Resolved 2015-11-17

History

#1 Updated by intrigeri 2014-10-31 18:25:25

  • Description updated

#2 Updated by intrigeri 2015-03-06 19:51:21

  • has duplicate Feature #9027: Add our website to Firefox' hardcoded Public Key Pinning ("static pins") added

#3 Updated by intrigeri 2015-03-15 11:48:43

  • is duplicate of deleted (Feature #9027: Add our website to Firefox' hardcoded Public Key Pinning ("static pins"))

#4 Updated by sajolida 2015-08-14 11:53:33

  • Description updated
  • Target version set to 2016

#5 Updated by Dr_Whax 2016-08-20 12:37:19

  • Description updated
  • Assignee set to intrigeri
  • Target version changed from 2016 to 2018

#6 Updated by intrigeri 2016-08-27 10:13:55

  • blocks Feature #10558: Distribute a copy of UUI over a website with HSTS preload added

#7 Updated by intrigeri 2016-10-14 19:58:16

  • Status changed from Confirmed to In Progress

#8 Updated by intrigeri 2016-12-06 17:30:24

Once we make it into Chrome’s list (Feature #9102), at some point Mozilla will import from there and we’ll land onto their own list. And then this ticket will be done, except if we want to check how Safari and IE deal with that.

#10 Updated by intrigeri 2017-03-16 11:15:46

  • Status changed from In Progress to Resolved
  • Assignee deleted (intrigeri)

We’re in https://dxr.mozilla.org/comm-central/source/mozilla/security/manager/ssl/nsSTSPreloadList.inc too. So I think we’re done here :)

#11 Updated by intrigeri 2017-05-28 12:16:31

  • related to Feature #9027: Add our website to Firefox' hardcoded Public Key Pinning ("static pins") added