HSTS Discuss

1–8 of 8

A place to discuss HSTS preloading (hstspreload.org) in Chrome and across all browsers.

Related discussions about dynamic HSTS or other preloaded domain security policies (e.g. HPKP, Expect-CT, Expect-Staple) are also welcome.

0 selected

Joe DeBlasio2

4/25/23

HSTS preload list pruning

Closing the loop on this, removals landed in crrev.com/c/4455622. On Friday, March 10, 2023 at 5:14:

unread,

HSTS preload list pruning

Closing the loop on this, removals landed in crrev.com/c/4455622. On Friday, March 10, 2023 at 5:14:

4/25/23

Eric Lawrence, Nick Harper2

9/30/21

Misleading UX in HSTSPreload.org site

This is a bug in https://github.com/chromium/hstspreload.org/blob/

unread,

Misleading UX in HSTSPreload.org site

This is a bug in https://github.com/chromium/hstspreload.org/blob/

9/30/21

Daniel McArdle, … Nick Harper3

2/14/20

hstspreload.org is down?

This occasionally happens with Google App Engine. I don't know what causes it or how to reproduce

unread,

hstspreload.org is down?

This occasionally happens with Google App Engine. I don't know what causes it or how to reproduce

2/14/20

Eric Lawrence, … Nick Harper7

5/21/19

HSTS Preload Discrepancy between Chrome and Mozilla

Thanks for following up, folks. The reason this came up is that Microsoft Internet Explorer and Edge

unread,

HSTS Preload Discrepancy between Chrome and Mozilla

Thanks for following up, folks. The reason this came up is that Microsoft Internet Explorer and Edge

5/21/19

Nick Harper, Lucas Garron3

4/8/19

Spike in HSTS preload removals

Had we introduced automation for removing domains no longer meeting requirements around the same time

unread,

Spike in HSTS preload removals

Had we introduced automation for removing domains no longer meeting requirements around the same time

4/8/19

Lucas Garron, … Eric Lawrence15

6/11/18

Preloading HSTS for TLDs across browsers

Support for HSTS preloading of TLDs has landed for Microsoft Edge and Internet Explorer, slated to

unread,

Preloading HSTS for TLDs across browsers

Support for HSTS preloading of TLDs has landed for Microsoft Edge and Internet Explorer, slated to

6/11/18

Nick Harper, … Gabriel Montenegro4

4/9/18

Adding an IP address to the HSTS Preload list

I can also confirm we won't break with the new 1.1.1.1 and 1.0.0.1 entries (and similar ones you

unread,

Adding an IP address to the HSTS Preload list

I can also confirm we won't break with the new 1.1.1.1 and 1.0.0.1 entries (and similar ones you

4/9/18

Lucas Garron

10/19/17

HSTS Preload List: State of the Union 2017

[sent to hsts-discuss@, cross-post to security-dev@] Ahoy! It's been over 1.5 years since I sent

unread,

HSTS Preload List: State of the Union 2017

[sent to hsts-discuss@, cross-post to security-dev@] Ahoy! It's been over 1.5 years since I sent

10/19/17