Upstream version 5.34.104.0

[platform/framework/web/crosswalk.git] / src / net / http / transport_security_state_static.json

diff --git a/src/net/http/transport_security_state_static.json b/src/net/http/transport_security_state_static.json
index 48546eb..a5b544a 100644 (file)
--- a/src/net/http/transport_security_state_static.json
+++ b/src/net/http/transport_security_state_static.json
@@ -125,7 +125,11 @@
         "UTNUSERFirstClientAuthenticationandEmail",
         "UTNUSERFirstHardware",
         "UTNUSERFirstObject",
-        "GTECyberTrustGlobalRoot"
+        "GTECyberTrustGlobalRoot",
+        "BaltimoreCyberTrustRoot",
+        "GlobalSignRootCA",
+        "GlobalSignRootCA_R2",
+        "GlobalSignRootCA_R3"
       ]
     },
     {
@@ -177,6 +181,11 @@
     { "name": "script.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "history.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "security.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "goto.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "cloud.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "glass.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    // play.google.com doesn't have include_subdomains because of crbug.com/327834.
+    { "name": "play.google.com", "mode": "force-https", "pins": "google" },
 
     // Other Google-related domains that must use HTTPS.
     { "name": "market.android.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
@@ -198,8 +207,6 @@
     // and there are lots of links out there that still use the name. The correct
     // hostname for this is chart.googleapis.com.
     { "name": "chart.apis.google.com", "include_subdomains": true, "pins": "google" },
-    { "name": "oraprodsso.corp.google.com", "include_subdomains": true, "mode": "force-https" },
-    { "name": "oraprodmv.corp.google.com", "include_subdomains": true, "mode": "force-https" },
 
     // Other Google-related domains that must use an acceptable certificate
     // iff using SSL.
@@ -211,13 +218,14 @@
     { "name": "appspot.com", "include_subdomains": true, "pins": "google" },
     { "name": "googlesyndication.com", "include_subdomains": true, "pins": "google" },
     { "name": "doubleclick.net", "include_subdomains": true, "pins": "google" },
-    { "name": "ssl.gstatic.com", "include_subdomains": true, "pins": "google" },
+    { "name": "gstatic.com", "include_subdomains": true, "pins": "google" },
     { "name": "youtu.be", "include_subdomains": true, "pins": "google" },
     { "name": "android.com", "include_subdomains": true, "pins": "google" },
     { "name": "googlecommerce.com", "include_subdomains": true, "pins": "google" },
     { "name": "urchin.com", "include_subdomains": true, "pins": "google" },
     { "name": "goo.gl", "include_subdomains": true, "pins": "google" },
     { "name": "g.co", "include_subdomains": true, "pins": "google" },
+    { "name": "googletagmanager.com", "include_subdomains": true, "pins": "google" },
     { "name": "google.ac", "include_subdomains": true, "pins": "google" },
     { "name": "google.ad", "include_subdomains": true, "pins": "google" },
     { "name": "google.ae", "include_subdomains": true, "pins": "google" },
@@ -515,8 +523,7 @@
     { "name": "dev.twitter.com", "include_subdomains": true, "pins": "twitterCom" },
     { "name": "business.twitter.com", "include_subdomains": true, "pins": "twitterCom" },
     { "name": "platform.twitter.com", "include_subdomains": true, "pins": "twitterCDN" },
-    { "name": "si0.twimg.com", "include_subdomains": true, "pins": "twitterCDN" },
-    { "name": "twimg0-a.akamaihd.net", "include_subdomains": true, "pins": "twitterCDN" },
+    { "name": "twimg.com", "include_subdomains": true, "pins": "twitterCDN" },
     { "name": "braintreegateway.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "braintreepayments.com", "mode": "force-https" },
     { "name": "www.braintreepayments.com", "mode": "force-https" },
@@ -556,8 +563,12 @@
     { "name": "www.lookout.com", "mode": "force-https" },
     { "name": "mylookout.com", "mode": "force-https" },
     { "name": "www.mylookout.com", "mode": "force-https" },
-    { "name": "dm.lookout.com", "mode": "force-https" },
-    { "name": "dm.mylookout.com", "mode": "force-https" },
+    { "name": "dm.lookout.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "business.lookout.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "blog.lookout.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "faq.lookout.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "platform.lookout.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "email.lookout.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "itriskltd.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "stocktrade.de", "include_subdomains": true, "mode": "force-https" },
     { "name": "openshift.redhat.com", "include_subdomains": true, "mode": "force-https" },
@@ -617,8 +628,6 @@
     { "name": "www.cyveillance.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "blog.cyveillance.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "whonix.org", "include_subdomains": true, "mode": "force-https" },
-    { "name": "blueseed.co", "include_subdomains": true, "mode": "force-https" },
-    { "name": "forum.quantifiedself.com", "include_subdomains": true, "mode": "force-https" },
     { "name": "shodan.io", "include_subdomains": true, "mode": "force-https" },
     { "name": "rapidresearch.me", "include_subdomains": true, "mode": "force-https" },
     { "name": "surkatty.org", "include_subdomains": true, "mode": "force-https" },
@@ -646,6 +655,49 @@
     { "name": "davidlyness.com", "include_subdomains": true,  "mode": "force-https" },
     { "name": "medium.com", "include_subdomains": true,  "mode": "force-https" },
     { "name": "liberty.lavabit.com", "include_subdomains": true, "mode": "force-https", "pins": "lavabit" },
+    { "name": "getlantern.org", "include_subdomains": true, "mode": "force-https" },
+    { "name": "kinsights.com", "mode": "force-https" },
+    { "name": "simbolo.co.uk", "mode": "force-https" },
+    { "name": "www.simbolo.co.uk", "mode": "force-https" },
+    { "name": "zenpayroll.com", "mode": "force-https" },
+    { "name": "www.zenpayroll.com", "mode": "force-https" },
+    { "name": "get.zenpayroll.com", "mode": "force-https" },
+    { "name": "errors.zenpayroll.com", "mode": "force-https" },
+    { "name": "manage.zenpayroll.com", "mode": "force-https" },
+    { "name": "gernert-server.de", "include_subdomains": true, "mode": "force-https" },
+    { "name": "skydrive.live.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "lifeguard.aecom.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "data.qld.gov.au", "mode": "force-https" },
+    { "name": "publications.qld.gov.au", "mode": "force-https" },
+    { "name": "go.xero.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "login.xero.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "my.xero.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "payroll.xero.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "in.xero.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "api.xero.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "eff.org", "include_subdomains": true, "mode": "force-https" },
+    { "name": "mail.de", "include_subdomains": true, "mode": "force-https" },
+    { "name": "passport.yandex.ru", "mode": "force-https" },
+    { "name": "passport.yandex.com", "mode": "force-https" },
+    { "name": "passport.yandex.ua", "mode": "force-https" },
+    { "name": "passport.yandex.by", "mode": "force-https" },
+    { "name": "passport.yandex.kz", "mode": "force-https" },
+    { "name": "passport.yandex.com.tr", "mode": "force-https" },
+    { "name": "mnsure.org", "include_subdomains": true, "mode": "force-https" },
+    { "name": "getcloak.com", "mode": "force-https" },
+    { "name": "www.getcloak.com", "mode": "force-https" },
+    { "name": "matteomarescotti.name", "include_subdomains": true, "mode": "force-https" },
+    { "name": "www.heliosnet.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "opsmate.com", "mode": "force-https" },
+    { "name": "www.opsmate.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "f-droid.org", "include_subdomains": true, "mode": "force-https" },
+    { "name": "www.evernote.com", "mode": "force-https" },
+    { "name": "app.yinxiang.com", "mode": "force-https" },
+    { "name": "neilwynne.com", "mode": "force-https" },
+    { "name": "calyxinstitute.org", "mode": "force-https" },
+    { "name": "www.calyxinstitute.org", "mode": "force-https" },
+    { "name": "blacklane.com", "include_subdomains": true, "mode": "force-https" },
+    { "name": "boxcryptor.com", "include_subdomains": true, "mode": "force-https" },
 
     // Entries that are only valid if the client supports SNI.
     { "name": "gmail.com", "mode": "force-https", "pins": "google", "snionly": true },
@@ -653,6 +705,7 @@
     { "name": "www.gmail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "www.googlemail.com", "mode": "force-https", "pins": "google", "snionly": true },
     { "name": "google-analytics.com", "include_subdomains": true, "pins": "google", "snionly": true },
-    { "name": "googlegroups.com", "include_subdomains": true, "pins": "google", "snionly": true }
+    { "name": "googlegroups.com", "include_subdomains": true, "pins": "google", "snionly": true },
+    { "name": "mykolab.com", "include_subdomains": true, "mode": "force-https", "snionly": true }
   ]
 }