Opened 4 years ago

Closed 4 years ago

#16584 closed defect (worksforme)

HSTS preload list out of date?

Reported by: jsha Owned by:
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Hi,

I was checking the HSTS preload list for TBB, and it seems to be out of date. As far as I can tell, it's not been updated since 2014-08-23. Is that accurate? If so, I'd like to request an update.

https://gitweb.torproject.org/tor-browser.git/log/security/manager/boot/src/nsSTSPreloadList.inc

https://dxr.mozilla.org/mozilla-central/source/security/manager/ssl/nsSTSPreloadList.inc

Child Tickets

Change History (1)

comment:1 Changed 4 years ago by mikeperry

Resolution: worksforme
Status: newclosed

Our branch management is a bit weird in git, due to the need to constantly rebase our patches due to bitrot, etc every release. Here's the current branch for TBB 4.5, based on FF31.8.0
https://gitweb.torproject.org/tor-browser.git/log/security/manager/boot/src/nsSTSPreloadList.inc?h=tor-browser-31.8.0esr-4.5-1

Here is the current branch for TBB 5.0, based on FF38.1.0.
https://gitweb.torproject.org/tor-browser.git/log/security/manager/boot/src/nsSTSPreloadList.inc?h=tor-browser-38.1.0esr-5.0-1

As you can see, the HSTS list has been regularly updated in both cases by Mozilla.

Note: See TracTickets for help on using tickets.