Skip to content
πŸ”’πŸ” A Go package to scan sites against requirements for Chromium-maintained HSTS preload list.
Go Makefile
Branch: master
Clone or download
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
batch Include leaf cert summary in scan output. Aug 9, 2017
chromium/preloadlist Fix tests. Dec 20, 2017
cmd/hstspreload Some changes to address code review comments. Dec 20, 2017
.travis.yml Update to go 1.12 in .travis.yml Jul 3, 2019
CONTRIBUTING.md HSTS preload list handling code as of 2016-03-18. Mar 18, 2016
LICENSE Move LICENSE.md to LICENSE to help an automated tool. Apr 26, 2016
Makefile Add coverage to the test commands in the Makefile. May 12, 2016
README.md Fix submission site repo link in README. Jan 13, 2017
doc.go Fix typo to state that there are 3 parts to the package. Closes #98. Feb 7, 2017
domain.go Add gentler public suffix error. Closes #83. Sep 27, 2017
domain_test.go Add gentler public suffix error. Closes #83. Sep 27, 2017
header.go Change `header.preloadable.max_age.too_low` to `header.preloadable.ma… Oct 11, 2017
header_test.go Change `header.preloadable.max_age.too_low` to `header.preloadable.ma… Oct 11, 2017
issues.go Change `header.preloadable.max_age.too_low` to `header.preloadable.ma… Oct 11, 2017
issues_test.go Export issues.Match(wanted). May 12, 2016
redirects.go Check hostname without port for initial redirect from HTTP. Fixes #100. May 2, 2017
redirects_test.go Update test URL for TestHTTPUnavailable. Aug 28, 2017
response.go
response_test.go Change `header.preloadable.max_age.too_low` to `header.preloadable.ma… Oct 11, 2017
test_list.json Move chromiumpreload to chromium/preloadlist and implement reading fr… May 13, 2016
tls.go Don't add obsolete cipher suite warning for TLS 1.3 Jul 3, 2019

README.md

HSTS Preload List – Utility Code

GoDoc Build Status

HSTS is HTTP Strict Transport Security, which is a policy system for web sites to express a desire only to be contacted over HTTPS.

See https://github.com/chromium/hstspreload.org for the submission site code.

Usage

To check if a domain satisfies the requirements for preloading (assuming $PATH contains $GOPATH/bin/):

go get github.com/chromium/hstspreload/...
hstspreload preloadabledomain wikipedia.org

For full documentation, see https://godoc.org/github.com/chromium/hstspreload

You can’t perform that action at this time.