UXP - Unnamed repository; edit this file 'description' to name the repository.

summary refs log tree commit diff stats

path: root/security/manager/tools/getHSTSPreloadList.js

	Commit message (Collapse)	Author	Age	Lines
*	Issue #1498 - Part 1: Stop using HSTS preload lists.	wolfbeast	2020-04-14	-461/+0
\|
*	Issue #447 - Update HSTS preload list & reduce debug spew	wolfbeast	2020-04-14	-4/+7
\| \| \| \| \|	Commented out spewing dump() statements in loops. With the ever growing HSTS list it takes too much time and is pointless to display.
*	Issue #447 - Improve the getHSTSPreloadList script	wolfbeast	2019-11-09	-12/+16
\| \| \| \| \| \| \| \| \|	- Use HEAD instead of GET for probe to avoid loading pages - Reduce retries to 2 - Reduce timeout to 10 s (since we're just getting a HEAD this is royal) - Identify ourselves to websites as an automated tool - Improve performance of list merging (O(n^2) was getting too expensive) - Add a total counter and perform GC every 200 requests
*	Restore clearly-delimited format for the HSTS preload list	trav90	2018-06-06	-63/+21
\|
*	Increase concurrent lookups to 15 when generating HSTS preload list	trav90	2018-06-05	-1/+1
\|
*	Update HSTS preload list generation script	trav90	2018-06-05	-5/+4
\| \| \| \| \| \| \| \|	Previous behavior: if an entry was in the previously-used list, and there would be an error connecting to or processing the host, it would adopt it using the previous status, with a new minimum required max age TTL. New behavior: if an entry is in the previously-used list, and there is an error connecting to or processing the host, it will be dropped from the preload list. The old behavior would allow entries to persist on the HSTS preload list when they drop off the 'net. Considering domain churn, it would cause issues for new owners for having a persisted HSTS entry preloaded in the browser. Bonus: it keeps our HSTS preload list lean.
*	Add m-esr52 at 52.6.0	Matt A. Tobin	2018-02-02	-0/+497