New issue
Advanced search Search tips

Issue 591849 link

Starred by 1 user

Issue metadata

Status: Fixed
Owner: ----
Closed: May 2018
Components:
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: 2
Type: Bug

Blocking:
issue 587954


Participants' hotlists:
HSTS-Preload


Sign in to add a comment

Support automated HSTS preload list removals

Project Member Reported by lgar...@chromium.org, Mar 3 2016

Issue description

In theory, this is a simple submission form on hstspreload.appspot.com that checks for the right header ( Issue 590357 ), but we need to make it very clear that there will be lasting effects from having been on the list in the past..

In particular:
- Removal will take weeks in Chrome.
- No guarantees about other browsers.
- Since the list is available to the public, previous versions of the list may already be permanently hard-coded into third-party software without our knowledge*.

* I don't concretely know of anyone who does this except other browsers, but I would not be surprised if this is already happening.
 
Components: Internals>Network>DomainSecurityPolicy
Labels: Hotlist-HSTS-Preload
This should be closable now.
Status: Fixed (was: Untriaged)
https://hstspreload.org/removal/ has been working for a while now.

Sign in to add a comment