Skip to content

Commit

Permalink
#551: update certs, pins, TLDs
Browse files Browse the repository at this point in the history
  • Loading branch information
@classilla
classilla committed May 9, 2019
1 parent 4af72ac commit bc5094b
Show file tree
Hide file tree
Showing 3 changed files with 4,482 additions and 1,862 deletions.
97 changes: 68 additions & 29 deletions netwerk/dns/effective_tld_names.dat
View file
Original file line number Diff line number Diff line change
Expand Up @@ -155,8 +155,13 @@ mil.al
net.al
org.al

// am : https://en.wikipedia.org/wiki/.am
// am : https://www.amnic.net/policy/en/Policy_EN.pdf
am
co.am
com.am
commune.am
net.am
org.am

// ao : https://en.wikipedia.org/wiki/.ao
// http://www.dns.ao/REGISTR.DOC
Expand Down Expand Up @@ -984,25 +989,23 @@ fm
fo

// fr : http://www.afnic.fr/
// domaines descriptifs : http://www.afnic.fr/obtenir/chartes/nommage-fr/annexe-descriptifs
// domaines descriptifs : https://www.afnic.fr/medias/documents/Cadre_legal/Afnic_Naming_Policy_12122016_VEN.pdf
fr
com.fr
asso.fr
com.fr
gouv.fr
nom.fr
prd.fr
presse.fr
tm.fr
// domaines sectoriels : http://www.afnic.fr/obtenir/chartes/nommage-fr/annexe-sectoriels
// domaines sectoriels : https://www.afnic.fr/en/products-and-services/the-fr-tld/sector-based-fr-domains-4.html
aeroport.fr
assedic.fr
avocat.fr
avoues.fr
cci.fr
chambagri.fr
chirurgiens-dentistes.fr
experts-comptables.fr
geometre-expert.fr
gouv.fr
greta.fr
huissier-justice.fr
medecin.fr
Expand Down Expand Up @@ -6188,34 +6191,33 @@ org.to
edu.to
mil.to

// subTLDs: https://www.nic.tr/forms/eng/policies.pdf
// and: https://www.nic.tr/forms/politikalar.pdf
// Submitted by <[email protected]>
// tr : https://nic.tr/
// https://nic.tr/forms/eng/policies.pdf
// https://nic.tr/index.php?USRACTN=PRICELST
tr
com.tr
info.tr
biz.tr
net.tr
org.tr
web.tr
gen.tr
tv.tr
av.tr
dr.tr
bbs.tr
name.tr
tel.tr
gov.tr
bel.tr
pol.tr
biz.tr
com.tr
dr.tr
edu.tr
gen.tr
gov.tr
info.tr
mil.tr
k12.tr
edu.tr
kep.tr

name.tr
net.tr
org.tr
pol.tr
tel.tr
tsk.tr
tv.tr
web.tr
// Used by Northern Cyprus
nc.tr

// Used by government agencies of Northern Cyprus
gov.nc.tr

Expand Down Expand Up @@ -7938,9 +7940,6 @@ dodge
// dog : 2014-12-04 Binky Moon, LLC
dog

// doha : 2014-09-18 Communications Regulatory Authority (CRA)
doha

// domains : 2013-10-17 Binky Moon, LLC
domains

Expand Down Expand Up @@ -10825,6 +10824,7 @@ myasustor.com
// Automattic Inc. : https://automattic.com/
// Submitted by Alex Concha <[email protected]>
go-vip.co
go-vip.net
wpcomstaging.com

// AVM : https://avm.de
Expand All @@ -10840,6 +10840,10 @@ myfritz.net
// Submitted by Anthony Voutas <[email protected]>
backplaneapp.io

// Banzai Cloud
// Submitted by Gabor Kozma <[email protected]>
app.banzaicloud.io

// BetaInABox
// Submitted by Adrian <[email protected]>
betainabox.com
Expand Down Expand Up @@ -10875,6 +10879,7 @@ browsersafetymark.io

// Bytemark Hosting : https://www.bytemark.co.uk
// Submitted by Paul Cammish <[email protected]>
uk0.bigv.io
dh.bytemark.co.uk
vm.bytemark.co.uk

Expand Down Expand Up @@ -10943,6 +10948,10 @@ certmgr.org
// Submitted by Alex Stoddard <[email protected]>
xenapponazure.com

// Civilized Discourse Construction Kit, Inc. : https://www.discourse.org/
// Submitted by Rishabh Nambiar <[email protected]>
discourse.group

// ClearVox : http://www.clearvox.nl/
// Submitted by Leon Rowland <[email protected]>
virtueeldomein.nl
Expand All @@ -10969,6 +10978,10 @@ cloudaccess.net
cloudcontrolled.com
cloudcontrolapp.com

// Cloudflare, Inc. : https://www.cloudflare.com/
// Submitted by Jake Riesterer <[email protected]>
workers.dev

// co.ca : http://registry.co.ca/
co.ca

Expand Down Expand Up @@ -11709,6 +11722,11 @@ githubusercontent.com
// Submitted by Alex Hanselka <[email protected]>
gitlab.io

// GOV.UK Platform as a Service : https://www.cloud.service.gov.uk/
// Submitted by Tom Whitwell <[email protected]>
cloudapps.digital
london.cloudapps.digital

// UKHomeOffice : https://www.gov.uk/government/organisations/home-office
// Submitted by Jon Shanks <[email protected]>
homeoffice.gov.uk
Expand Down Expand Up @@ -12076,6 +12094,10 @@ net.ru
org.ru
pp.ru

// Nabu Casa : https://www.nabucasa.com
// Submitted by Paulus Schoutsen <[email protected]>
ui.nabu.casa

// Netlify : https://www.netlify.com
// Submitted by Jessica Parsons <[email protected]>
bitballoon.com
Expand Down Expand Up @@ -12405,6 +12427,11 @@ vaporcloud.io
rackmaze.com
rackmaze.net

// Rancher Labs, Inc : https://rancher.com
// Submitted by Vincent Fiduccia <[email protected]>
*.on-rancher.cloud
*.on-rio.io

// Read The Docs, Inc : https://www.readthedocs.org
// Submitted by David Fischer <[email protected]>
readthedocs.io
Expand All @@ -12428,6 +12455,10 @@ wellbeingzone.eu
ptplus.fit
wellbeingzone.co.uk

// Rochester Institute of Technology : http://www.rit.edu/
// Submitted by Jennifer Herting <[email protected]>
git-pages.rit.edu

// Sandstorm Development Group, Inc. : https://sandcats.io/
// Submitted by Asheesh Laroia <[email protected]>
sandcats.io
Expand Down Expand Up @@ -12535,6 +12566,10 @@ temp-dns.com
applicationcloud.io
scapp.io

// Syncloud : https://syncloud.org
// Submitted by Boris Rybalkin <[email protected]>
syncloud.it

// Synology, Inc. : https://www.synology.com/
// Submitted by Rony Weng <[email protected]>
diskstation.me
Expand Down Expand Up @@ -12732,6 +12767,10 @@ now.sh
// Submitted by Martin Angelov <[email protected]>
bss.design

// Zitcom A/S : https://www.zitcom.dk
// Submitted by Emil Stahl <[email protected]>
site.builder.nu

// Zone.id : https://zone.id/
// Submitted by Su Hendro <[email protected]>
zone.id
Expand Down
8 changes: 5 additions & 3 deletions security/manager/ssl/StaticHPKPins.h
View file
Original file line number Diff line number Diff line change
Expand Up @@ -690,13 +690,13 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
{ "business.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "business.twitter.com", true, false, false, -1, &kPinset_twitterCom },
{ "ca.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "calendar.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "cd.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "cdn.ampproject.org", true, false, false, -1, &kPinset_google_root_pems },
{ "cdn.mozilla.net", true, false, true, -1, &kPinset_mozilla_services },
{ "cdn.mozilla.org", true, false, true, -1, &kPinset_mozilla_services },
{ "cg.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "ch.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "chart.apis.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "check.torproject.org", true, false, false, -1, &kPinset_tor },
{ "checkout.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "chfr.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
Expand Down Expand Up @@ -1003,6 +1003,7 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
{ "gvt1.com", true, false, false, -1, &kPinset_google_root_pems },
{ "gvt2.com", true, false, false, -1, &kPinset_google_root_pems },
{ "gvt3.com", true, false, false, -1, &kPinset_google_root_pems },
{ "hangout", true, false, false, -1, &kPinset_google_root_pems },
{ "hangouts.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "history.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "hk.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
Expand Down Expand Up @@ -1066,6 +1067,7 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
{ "profiles.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "py.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "qc.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "remotedesktop.corp.google.com", true, false, false, -1, &kPinset_google_root_pems },
{ "research.facebook.com", true, false, false, -1, &kPinset_facebook },
{ "ro.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
{ "ru.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
Expand Down Expand Up @@ -1146,8 +1148,8 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = {
{ "zh.search.yahoo.com", false, true, false, -1, &kPinset_yahoo },
};

// Pinning Preload List Length = 483;
// Pinning Preload List Length = 485;

static const int32_t kUnknownId = -1;

static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1560428652618000);
static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1565612908749000);
Loading

0 comments on commit bc5094b

Please sign in to comment.