Get Listed on HTTPS Everywhere Atlas

Here is How To Get Listed on HTTPS Everywhere Atlas With a HSTS Domain. Only Making Website HSTS Will Not Work, You Need to Inform the Browsers. It is true that Google has an Appspot application where they manually sort out the eligible HSTS websites after submission, but basically there is an Atlas of HSTS website.That is maintained by Electronic Frontier Foundation.

Initial Steps to Get Listed on HTTPS Everywhere Atlas

It is too big chapter to write within a blog article, how to make your website HSTS. But you can follow this type of guide for nginx. We have many SSL/TLS related guides, you can use the search function of this website if you need. Ultimately, your header should be like ours :

Public-Key-Pining is not mandatory.

Steps to Get Listed on HTTPS Everywhere Atlas

EFF has project on GitHub :

You will fork it to your GitHub Account, initially you need to add your website in the repo’s list of websites. Then you need to add your rules and send a pull request. They will check and take the update. There is no need to do anything more than the above steps. This is how Paypal, Akamai to us, all got in to HTTPS Everywhere Atlas. Right not our thecustomizewindows.com.xml file’s ruleset is :

These rules actually are applied at browser level. They are shipped with the set or something like that. We used free SSL certificate of CloudFlare for that thecustomizewindows.net domain. The chance that someone will ever open https://thecustomizewindows.net is quite rare.

Today we updated to these rules. Akamai and Google’s subdomains were not in our secure cookie list. So, our CORS was only determinant.