Hi

How do we handle auto generated HSTS rules?
https://github.com/EFForg/https-everywhere/blob/master/src/chrome/content/rules/Onlime.ch.xml
is only enabled on Firefox, but the rule is in Firefox' preload list
too:
https://dxr.mozilla.org/mozilla-central/source/security/manager/boot/src/nsSTSPreloadList.inc#351

Should we delete such rules now or disable completely?

Regards
Jonas

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
HTTPS-Everywhere mailing list
[email protected]
https://lists.eff.org/mailman/listinfo/https-everywhere

Reply via email to