• Home
  • Archive
  • Tools
  • Contact Us

The Customize Windows

Technology Journal

  • Cloud Computing
  • Computer
  • Digital Photography
  • Windows 7
  • Archive
  • Cloud Computing
  • Virtualization
  • Computer and Internet
  • Digital Photography
  • Android
  • Sysadmin
  • Electronics
  • Big Data
  • Virtualization
  • Downloads
  • Web Development
  • Apple
  • Android
Advertisement
You are here: Home » Get Listed on HTTPS Everywhere Atlas

By Abhishek Ghosh May 6, 2015 12:18 pm Updated on May 6, 2015

Get Listed on HTTPS Everywhere Atlas

Advertisement

Here is How To Get Listed on HTTPS Everywhere Atlas With a HSTS Domain. Only Making Website HSTS Will Not Work, You Need to Inform the Browsers. It is true that Google has an Appspot application where they manually sort out the eligible HSTS websites after submission, but basically there is an Atlas of HSTS website.That is maintained by Electronic Frontier Foundation.

 

Initial Steps to Get Listed on HTTPS Everywhere Atlas

 

It is too big chapter to write within a blog article, how to make your website HSTS. But you can follow this type of guide for nginx. We have many SSL/TLS related guides, you can use the search function of this website if you need. Ultimately, your header should be like ours :

Vim
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
~  curl -I https://thecustomizewindows.com
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 06 May 2015 12:03:07 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
Vary: Accept-Encoding
Set-Cookie: PHPSESSID=9l4n93o155f6gj9f1dl9ol74t6; path=/
Expires: Tue, 01 Mar 2016 12:03:07 GMT
Cache-Control: max-age=25920000
Pragma: no-cache
X-Pingback: https://thecustomizewindows.com/xmlrpc.php
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Public-Key-Pins: pin-sha256="cTvjlwJ90gznKckrq+Le+9w5ncyKFwzLJOkgMBNoX2M="; max-age=5184000; includeSubDomains
Cache-Control: Public
Alternate-Protocol: 443:npn-spdy/3
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Public-Key-Pining is not mandatory.

Advertisement

---

Get Listed on HTTPS Everywhere Atlas

 

Steps to Get Listed on HTTPS Everywhere Atlas

 

EFF has project on GitHub :

Vim
1
https://github.com/EFForg/https-everywhere # copy the url to text editor

You will fork it to your GitHub Account, initially you need to add your website in the repo’s list of websites. Then you need to add your rules and send a pull request. They will check and take the update. There is no need to do anything more than the above steps. This is how Paypal, Akamai to us, all got in to HTTPS Everywhere Atlas. Right not our thecustomizewindows.com.xml file’s ruleset is :

Vim
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
<ruleset name="The Customize Windows">
<target host="thecustomizewindows.com" />
<target host="www.thecustomizewindows.com" />
<target host="thecustomizewindows.net" />
<target host="www.thecustomizewindows.net" />
<!-- Akamai CDN -->
<securecookie host="^a248\.e\.akamai\.net$" name=".+"/>
<!-- allow trusted services -->
<securecookie host="^cdn\.goroost\.com$" name=".+"/>
<securecookie host="^www\.googletagservices\.com$" name=".+"/>
<securecookie host="^tpc\.googlesyndication\.com$" name=".+"/>
<securecookie host="^googleads\.g\.doubleclick\.net$" name=".+"/>
<!-- needed for debugging and dev works related to HSTS -->
<exclusion pattern="^http://cloud\.thecustomizewindows\.com/"/>
<rule from="^http://(?:www\.)?thecustomizewindows\.com/" to="https://thecustomizewindows.com/"/>
<!-- forcing higher security for currently unused dot net domain  -->
<rule from="^http://(?:www\.)?thecustomizewindows\.net/" to="https://thecustomizewindows.com/"/>
</ruleset>

These rules actually are applied at browser level. They are shipped with the set or something like that. We used free SSL certificate of CloudFlare for that thecustomizewindows.net domain. The chance that someone will ever open https://thecustomizewindows.net is quite rare.

Today we updated to these rules. Akamai and Google’s subdomains were not in our secure cookie list. So, our CORS was only determinant.

This Article Has Been Shared 914 Times!

Facebook Twitter Pinterest
Abhishek Ghosh

About Abhishek Ghosh

Abhishek Ghosh is a Businessman, Orthopaedic Surgeon, Author and Blogger. You can keep touch with him on Twitter - @AbhishekCTRL.

Here’s what we’ve got for you which might like :

Articles Related to Get Listed on HTTPS Everywhere Atlas

  • How to embrace the Cloud Computing Concept Properly ?

    How to embrace the Cloud Computing Concept Properly is a Big Question stating from the developers to the managing director of a medium sized company.

  • Keyless Door Unlocking Mobile Cloud Based Apps : Gaining More Interest

    Keyless Door Unlocking Mobile Cloud Based Apps like Lockitron, ShareKey are growing interest from both the developers and the users. Let us have a deeper look.

  • Hybrid Cloud is Trying Through the Back Door

    Hybrid cloud is regarded by many as the best way to leverage the potential of cloud computing. But in practice, projects often gets uncontrolled.

  • Cloud Security Solutions for Tablets and Smartphones

    Cloud Security Solutions for Tablets and Smartphones covers the issues with lost or stolen mobile devices, accidental data deletion, App security and Malwares.

  • Service Oriented Architecture (SOA) : Detail Article

    Service Oriented Architecture or SOA is an architectural pattern of IT which plays a special role on business processes, where levels of abstraction are basis.

Additionally, performing a search on this website can help you. Also, we have YouTube Videos.

Take The Conversation Further ...

We'd love to know your thoughts on this article.
Meet the Author over on Twitter to join the conversation right now!

If you want to Advertise on our Article or want a Sponsored Article, you are invited to Contact us.

Contact Us

Subscribe To Our Free Newsletter

You can subscribe to our Free Once a Day, Regular Newsletter by clicking the subscribe button below.

Click To Subscribe

Please Confirm the Subscription When Approval Email Will Arrive in Your Email Inbox as Second Step.

Search this website…

 

Popular Articles

Our Homepage is best place to find popular articles!

Here Are Some Good to Read Articles :

  • Cloud Computing Service Models
  • What is Cloud Computing?
  • Cloud Computing and Social Networks in Mobile Space
  • ARM Processor Architecture
  • What Camera Mode to Choose
  • Indispensable MySQL queries for custom fields in WordPress
  • Windows 7 Speech Recognition Scripting Related Tutorials

Social Networks

  • Pinterest (20K Followers)
  • Twitter (4.9k Followers)
  • Facebook (5.8k Followers)
  • LinkedIn (3.7k Followers)
  • YouTube (1.2k Followers)
  • GitHub (Repository)
  • GitHub (Gists)
Looking to publish sponsored article on our website?

Contact us

Recent Posts

  • How To Repack Installed Software on Debian/Ubuntu January 16, 2021
  • Components of Agile Software Development January 15, 2021
  • What is Conway’s Law? January 14, 2021
  • Effects of Digitization on Companies : Part XIII January 13, 2021
  • What is SoftAP Mode? January 12, 2021

 

About This Article

Cite this article as: Abhishek Ghosh, "Get Listed on HTTPS Everywhere Atlas," in The Customize Windows, May 6, 2015, January 17, 2021, https://thecustomizewindows.com/2015/05/listed-https-everywhere-atlas/.

Source:The Customize Windows, JiMA.in

 

This website uses cookies. If you do not want to allow us to use cookies and/or non-personalized Ads, kindly clear browser cookies after closing this webpage.

Read Cookie Policy.

PC users can consult Corrine Chorney for Security.

Want to know more about us? Read Notability and Mentions & Our Setup.

Copyright © 2021 - The Customize Windows | dESIGNed by The Customize Windows

Copyright  · Privacy Policy  · Advertising Policy  · Terms of Service  · Refund Policy