Front page: Indicate whether preloaded entries include subdomains.
Opened this issue · 3 comments
lgarron commented
e.g:
- With subdomains: https://hstspreload.org/?domain=facebook.com
- Without subdomains: https://hstspreload.org/?domain=youtube.com
lgarron commented
Note that this either requires the server to look at a recent version of the preload list, or to cache the information in the database.
ExE-Boss commented
Actually, the curl log for https://youtube.com indicates that the domain does indeed include subdomains now:
PS C:\> curl -IL https://youtube.com
HTTP/2 301
content-length: 0
location: https://www.youtube.com/
strict-transport-security: max-age=31536000; includeSubDomains; preload
date: Tue, 14 Nov 2017 05:52:57 GMT
content-type: text/html
server: YouTube Frontend Proxy
x-xss-protection: 1; mode=block
alt-svc: quic=":443"; ma=2592000; v="41,39,38,37,35"
lgarron commented
Actually, the curl log for https://youtube.com indicates that the domain does indeed include subdomains now:
Indeed! :-D
https://twitter.com/lgarron/status/920776629877534720
A current example is www.wordpress.com