chromium/hstspreload.org

Inconsistency in messages

Opened this issue · 0 comments

When submitting a domain to the preload list, submitters are required to affirm that "I am the site owner of (domain) or have their permission to preload HSTS." This suggests a possibility that someone could not have permission, which contradicts the statement in "Submission Requirements" that "if a site sends the preload directive in an HSTS header, it is considered to be requesting inclusion in the preload list and may be submitted via the form on this site."

A decision should be made (if it hasn't already) on whether third-party submissions are acceptable, and the message inconsistent with that decision removed or edited.