[tor-dev] Always up-to-date HSTS preload list for Tor?
Ivan Ristic
ivan.ristic at gmail.com
Fri Jan 15 13:22:14 UTC 2016
Dear Tor developers,
My SSL Labs server test has a feature where it checks for preloaded HSTS
in Chrome, IE, Firefox, and Tor.
You can see it near the bottom of this report, for example (under "HSTS
Preloading"):
https://www.ssllabs.com/ssltest/analyze.html?d=scotthelme.co.uk&s=107.170.218.42&latest
For Tor, I download the preload list from this URL:
https://gitweb.torproject.org/tor-browser.git/plain/security/manager/boot/src/nsSTSPreloadList.inc?h=tor-browser-38.2.1esr-5.0-2
That's the best I could find (when I originally implemented the
feature), and I now see that the version number has advanced since.
Which brings me to my question: is there a public URL that always
contains the latest preload list?
Thanks!
--
Ivan
More information about the tor-dev
mailing list