4 ms·
> Replace many web domains in the source code with non-existent alternatives ending in qjz9zk (known as domain substitution) How does this play with the HSTS p
by tomjakubowski 10y ago
> Replace many web domains in the source code with non-existent alternatives ending in qjz9zk (known as domain substitution)
How does this play with the HSTS preload list? That'd be quite the baby to throw out with the bathwater.
edit: well, I don't see anything like "transport_security_state_static.json" in this list here, so maybe it's fine: https://github.com/Eloston/ungoogled-chromium/blob/master/resources/common/domain_substitution_list https://github.com/Eloston/ungoogled-chromium/blob/master/re...
edit2: The preload list seems to be excluded from domain substitution explicitly. Yay! https://github.com/Eloston/ungoogled-chromium/blob/4bbfff4472a47bdc0e8cc26da65542bbcc6a8576/developer_utilities/update_helper.py#L127 https://github.com/Eloston/ungoogled-chromium/blob/4bbfff447...