Closed Bug 1265353 Opened 8 years ago Closed 8 years ago

Add site to Preload HSTS List

Categories

(Core :: Security, defect)

Product:
Core
Component:
Security
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

()

Status:
VERIFIED WORKSFORME

People

(Reporter: patrickalbrecht1996, Unassigned)

References

(
URL
)

Details

User Agent: Mozilla/5.0 (Windows NT 6.1; rv:47.0) Gecko/20100101 Firefox/47.0
Build ID: 20160417004052

Steps to reproduce:

I run my own website (z33.ch) with configured preload HSTS and add the site to Chromium List months ago.


Actual results:

I don't find my website on the firefox preload list (https://hg.mozilla.org/releases/mozilla-aurora/file/68d3781deda0/security/manager/ssl/nsSTSPreloadList.inc).


Expected results:

I wish that my site is added as I fulfill the 
additional requirements from mozilla/the firefox team as described https://blog.mozilla.org/security/2012/11/01/preloading-hsts/ and https://wiki.mozilla.org/Privacy/Features/HSTS_Preload_List.
URL: https://z33.ch
Component: Untriaged → Security
Product: Firefox → Core
Version: Trunk → unspecified
It's here: https://hg.mozilla.org/releases/mozilla-aurora/annotate/50d894b6fd0a/security/manager/ssl/nsSTSPreloadList.inc#l9751

There were some issues with the script that automatically updated the list, which is perhaps why it wasn't added for so long.
Status: UNCONFIRMED → RESOLVED
Closed: 8 years ago
Resolution: --- → WORKSFORME
Thank you, don't know why I oversee that :)
Status: RESOLVED → VERIFIED
You need to log in before you can comment on or make changes to this bug.