[tor-dev] Always up-to-date HSTS preload list for Tor?

Ivan Ristic ivan.ristic at gmail.com
Fri Jan 15 13:22:14 UTC 2016


Dear Tor developers,

My SSL Labs server test has a feature where it checks for preloaded HSTS
in Chrome, IE, Firefox, and Tor.

You can see it near the bottom of this report, for example (under "HSTS
Preloading"):

https://www.ssllabs.com/ssltest/analyze.html?d=scotthelme.co.uk&s=107.170.218.42&latest

For Tor, I download the preload list from this URL:

https://gitweb.torproject.org/tor-browser.git/plain/security/manager/boot/src/nsSTSPreloadList.inc?h=tor-browser-38.2.1esr-5.0-2

That's the best I could find (when I originally implemented the
feature), and I now see that the version number has advanced since.

Which brings me to my question: is there a public URL that always
contains the latest preload list?

Thanks!

-- 
Ivan


More information about the tor-dev mailing list