diff --git a/security/manager/boot/src/StaticHPKPins.h b/security/manager/boot/src/StaticHPKPins.h index 8707f659233..70ea57e2498 100644 --- a/security/manager/boot/src/StaticHPKPins.h +++ b/security/manager/boot/src/StaticHPKPins.h @@ -191,15 +191,10 @@ typedef struct { } TransportSecurityPreload; static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = { - { "addons.mozilla.net", true, &kPinSet_mozilla }, - { "addons.mozilla.org", true, &kPinSet_mozilla }, - { "cdn.mozilla.net", true, &kPinSet_mozilla_cdn }, - { "cdn.mozilla.org", true, &kPinSet_mozilla_cdn }, { "exclude-subdomains.pinning.example.com", false, &kPinSet_mozilla_test }, { "include-subdomains.pinning.example.com", true, &kPinSet_mozilla_test }, - { "media.mozilla.com", true, &kPinSet_mozilla_cdn }, }; -static const int kPublicKeyPinningPreloadListLength = 7; +static const int kPublicKeyPinningPreloadListLength = 2; -const PRTime kPreloadPKPinsExpirationTime = INT64_C(1409867186821000); +const PRTime kPreloadPKPinsExpirationTime = INT64_C(1410109244157000); diff --git a/security/manager/tools/PreloadedHPKPins.json b/security/manager/tools/PreloadedHPKPins.json index 5c151a2a702..86d7ae74005 100644 --- a/security/manager/tools/PreloadedHPKPins.json +++ b/security/manager/tools/PreloadedHPKPins.json @@ -93,11 +93,12 @@ ], "entries": [ - { "name": "addons.mozilla.org", "include_subdomains": true, "pins": "mozilla" }, - { "name": "addons.mozilla.net", "include_subdomains": true, "pins": "mozilla" }, - { "name": "cdn.mozilla.net", "include_subdomains": true, "pins": "mozilla_cdn" }, - { "name": "cdn.mozilla.org", "include_subdomains": true, "pins": "mozilla_cdn" }, - { "name": "media.mozilla.com", "include_subdomains": true, "pins": "mozilla_cdn" }, + // Disable until bug 1005653 is fixed. + // { "name": "addons.mozilla.org", "include_subdomains": true, "pins": "mozilla" }, + // { "name": "addons.mozilla.net", "include_subdomains": true, "pins": "mozilla" }, + // { "name": "cdn.mozilla.net", "include_subdomains": true, "pins": "mozilla_cdn" }, + // { "name": "cdn.mozilla.org", "include_subdomains": true, "pins": "mozilla_cdn" }, + // { "name": "media.mozilla.com", "include_subdomains": true, "pins": "mozilla_cdn" }, { "name": "include-subdomains.pinning.example.com", "include_subdomains": true, "pins": "mozilla_test" }, { "name": "exclude-subdomains.pinning.example.com", "include_subdomains": false, "pins": "mozilla_test" } ]