Skip to content

Commit 81e4aeb

Browse files
author
Andrew Hobden
committed
Remove TODOs
1 parent 6a70f62 commit 81e4aeb

File tree

3 files changed

+8
-26
lines changed

3 files changed

+8
-26
lines changed

_data/subdomains.yml

+6-13
Original file line numberDiff line numberDiff line change
@@ -260,56 +260,49 @@ hsts-http:
260260
background: red
261261
category: Upgrade
262262
description: |
263-
TODO
263+
This site advertises HTTP Strict Transport Security however only provides HTTP.
264264
hsts-https:
265265
favicon: green
266266
background: rgb(68, 136, 68)
267267
category: Upgrade
268268
description: |
269-
TODO
269+
This site advertises HTTP Strict Transport Security and correctly provides HTTPS.
270270
https-everywhere-http:
271271
favicon: red
272272
background: rgb(170, 68, 68)
273273
category: Upgrade
274274
description: |
275-
<i>HTTPS Everywhere</i> does not work or is not enabled.<br>
276275
This domain will be upgraded to HTTPS if you use <a href="https://www.eff.org/https-everywhere">HTTPS Everywhere</a>.
277276
https-everywhere-https:
278277
favicon: green
279278
background: rgb(68, 136, 68)
280279
category: Upgrade
281280
description: |
282-
TODO
283281
This domain will be upgraded to HTTPS if you use <a href="https://www.eff.org/https-everywhere">HTTPS Everywhere</a>.
284282
preloaded-hsts-http:
285283
favicon: red
286284
background: rgb(170, 68, 68)
287285
category: Upgrade
288286
description: |
289-
TODO
287+
This site has preloaded HTTP Strict Transport Security however only provides HTTP.<br>
290288
Preloaded in: Chrome 44, Firefox 41
291289
preloaded-hsts-https:
292290
favicon: green
293291
background: rgb(68, 136, 68)
294292
category: Upgrade
295293
description: |
296-
TODO
294+
This site has preloaded HTTP Strict Transport Security and correctly provides HTTPS.<br>
297295
Preloaded in: Chrome 44, Firefox 41
298296
subdomain.preloaded-hsts:
299297
favicon: red
300298
background: red
301299
category: Upgrade
302300
description: |
303301
This site is preloaded to use HTTP Strict Transport Security, but its hostname doesn't match the certificate.
304-
upgrade-http:
305-
favicon: red
306-
background: red
307-
category: Upgrade
308-
description: |
309-
TODO
302+
Preloaded in: Chrome 44, Firefox 41
310303
upgrade-https:
311304
favicon: green
312305
background: rgb(68, 136, 68)
313306
category: Upgrade
314307
description: |
315-
TODO
308+
This site attempts to load an HTTP image. If upgrade-insecure-requests is working, the source should be rewritten to HTTPS. The image will vary depending on the outcome.

domains/upgrade/hsts-http/hsts-http.conf

-13
Original file line numberDiff line numberDiff line change
@@ -8,16 +8,3 @@ server {
88

99
root {{ site.serving-path }}/domains/upgrade/hsts-http;
1010
}
11-
12-
server {
13-
listen 443;
14-
server_name hsts.{{ site.domain }};
15-
16-
include {{ site.serving-path }}/nginx-includes/wildcard.normal.conf;
17-
include {{ site.serving-path }}/nginx-includes/tls-defaults.conf;
18-
include {{ site.serving-path }}/common/common.conf;
19-
20-
add_header Strict-Transport-Security "max-age=15768000; includeSubDomains";
21-
22-
root {{ site.serving-path }}/domains/upgrade/hsts-https;
23-
}

domains/upgrade/https-everywhere-http/index.html

+2
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,8 @@
33
layout: page
44
---
55

6+
<i>HTTPS Everywhere</i> does not work or is not enabled.<br>
7+
68
<div id="content">
79
<h1 style="font-size: 7vw;">
810
http://{{ page.subdomain }}.<br>{{ site.domain }}

0 commit comments

Comments
 (0)