diff --git a/security/manager/ssl/StaticHPKPins.h b/security/manager/ssl/StaticHPKPins.h index bed2f8c1e459..fd799959e864 100644 --- a/security/manager/ssl/StaticHPKPins.h +++ b/security/manager/ssl/StaticHPKPins.h @@ -879,4 +879,4 @@ static const TransportSecurityPreload kPublicKeyPinningPreloadList[] = { static const int32_t kUnknownId = -1; -static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1700477115458000); +static const PRTime kPreloadPKPinsExpirationTime = INT64_C(1700748424248000); diff --git a/security/manager/ssl/nsSTSPreloadList.inc b/security/manager/ssl/nsSTSPreloadList.inc index 9f319b7d3f0b..713c9b3fd40e 100644 --- a/security/manager/ssl/nsSTSPreloadList.inc +++ b/security/manager/ssl/nsSTSPreloadList.inc @@ -8,7 +8,7 @@ /*****************************************************************************/ #include -const PRTime gPreloadListExpirationTime = INT64_C(1702896310177000); +const PRTime gPreloadListExpirationTime = INT64_C(1703167616111000); %% 0--1.de, 1 0-0.io, 1 @@ -7784,6 +7784,7 @@ acriticismlab.org, 1 acroballe-circus.fr, 1 acrobatic.cf, 1 acrobatic.tk, 1 +acrolife.cz, 0 acronis.com, 1 acronis.events, 1 acronis.org, 0 @@ -13236,7 +13237,6 @@ ankaraotomobilcikmaparca.com, 1 ankaraotomobilcikmaparca.com.tr, 1 ankaraotomobilyedekparca.com, 1 ankaraotomobilyedekparca.com.tr, 1 -ankaraprofesyonelwebtasarim.com, 1 ankararentacar.name.tr, 1 ankaraseo.name.tr, 1 ankarasondajkuyusutemizleme.com, 1 @@ -16553,7 +16553,7 @@ aufmerksamkeitsstudie.com, 1 aufprise.de, 1 aufschieben.com, 1 aufwecken.dynu.net, 1 -augehost.com, 1 +augehost.com, 0 augendre.info, 1 augenklappe.com, 1 augenlaser-chemnitz.de, 1 @@ -23410,6 +23410,7 @@ blobfolio.com, 1 blobfox.coffee, 1 blobs.gg, 1 block-planet.xyz, 1 +block-this.com, 1 block.xyz, 1 block65.com, 1 blockchain.com, 1 @@ -25931,6 +25932,7 @@ btraviswrightmps.com, 1 btraviswrightmps.org, 1 btrb.ml, 1 btrfs.no, 1 +btsapem.com, 1 btsline.co.id, 1 btsoft.eu, 1 btsou.org, 1 @@ -27295,7 +27297,7 @@ caarecord.org, 1 caasd.org, 1 caasda.tk, 1 caasz.com, 1 -cabaladada.org, 1 +cabaladada.org, 0 cabale.fr, 1 cabalistic.tk, 1 caball.com, 1 @@ -27415,6 +27417,7 @@ cadonet.tk, 1 cadooz.com, 1 cadoth.net, 1 cadovod.tk, 1 +cadra.nl, 1 cadre.com, 1 cadreok.com, 1 cadsys.net, 1 @@ -34016,7 +34019,6 @@ columbusks.gov, 1 columbustelegram.com, 1 columbusunderground.com, 1 columbuswi.gov, 1 -columbuswines.com, 1 colwichks.gov, 1 colwyn.me, 1 colwynfm.com, 1 @@ -34507,7 +34509,6 @@ concor.ne.jp, 1 concord.sh, 1 concordance.bible, 1 concordiagaming.com, 1 -concordsoftwareleasing.com, 1 concrefy.com, 1 concretedreamsoftexas.com, 1 concretehermit.com, 0 @@ -35228,7 +35229,6 @@ corl3ss.com, 1 corleoncatering.com, 1 corlija.com, 1 corlinde.nl, 1 -cormactagging.ie, 1 cormed-heverlee.tk, 1 corn.az, 1 cornday.org, 1 @@ -35678,7 +35678,6 @@ cowlitzwa.gov, 1 coworkanywhere.ch, 1 coworking-luzern.ch, 1 coworking-space.tk, 1 -coxcapitalmanagement.com, 1 coxhealthfoundation.com, 1 coxxs.me, 1 coxxs.moe, 1 @@ -36128,7 +36127,6 @@ creepypastas.com, 1 creepystories.tk, 1 creer-mon-business-plan.fr, 1 creer-une-boutique-en-ligne.com, 1 -creermonsite-wp.com, 1 creerunblog.net, 1 cremalleradenuria.tk, 1 crematory.tk, 1 @@ -48458,7 +48456,6 @@ englishcompany-mobile.jp, 1 englishcompany.jp, 1 englishdirectory.de, 1 englishfamilyzone.tk, 1 -englishforums.com, 1 englishll.com, 1 englishlol.com, 1 englishouse.tk, 1 @@ -49677,7 +49674,6 @@ et-inf.de, 1 et.al, 1 et.gd, 1 et420nrw.tk, 1 -eta.cz, 1 etablissement.com, 1 etaes.eu, 1 etajerka-spb.ru, 1 @@ -50316,6 +50312,7 @@ evhoeft.com, 1 eviadc.com, 1 eviction.cf, 1 evidecor.com.br, 1 +evidencebased.net, 1 evidenceusa.com.br, 1 evidenciamidiasdigitais.com.br, 1 evidencija.ba, 1 @@ -55175,7 +55172,6 @@ formation-russe-paris.com, 1 formation.ai, 1 formation.tech, 1 formationaumagnetisme.fr, 1 -formationseeker.com, 1 formatmydoc.co.nz, 1 formblob.com, 1 formforger.com, 1 @@ -58017,7 +58013,6 @@ ganado.org, 0 ganaha.org, 1 ganapati.fr, 1 ganardinerillo.tk, 1 -ganasoku.net, 1 gancedo.com.es, 1 gandalfcz.tk, 1 gandalfservice.com, 1 @@ -59256,7 +59251,6 @@ getidmcc.com, 1 getinfoleads.tk, 1 getinsuranceanywhere.com, 1 getinternet.gov, 1 -getintopc.com, 1 getintra.org, 1 getitpeople.com, 1 getjadedlocal.com, 1 @@ -61226,7 +61220,6 @@ gpltimes.club, 1 gpltimes.com, 0 gpltimes.org, 1 gplvilla.com, 1 -gpna.org, 1 gpnotebook.com, 1 gpo.gov, 0 gpodev.gov, 1 @@ -61469,7 +61462,6 @@ grantashqg.com, 1 grantcountyne.gov, 1 grantdb.ca, 1 grantmorrison.net, 1 -grantpark.org, 1 grantsmasters.com, 1 grantsolutions.gov, 1 granttwpstclairmi.gov, 1 @@ -67886,6 +67878,7 @@ huisartsenpraktijkzonnehoed.nl, 1 huisartsenpraktijkzwalm.be, 1 huisdierinfopunt.tk, 1 huiser.nl, 1 +huisjeboompje-baby.nl, 1 huislaw.com, 1 huislijn.nl, 1 huissier-vosges.com, 1 @@ -70980,7 +70973,6 @@ inspired-lua.org, 1 inspiredelements.co.uk, 1 inspiredhousewife.com, 1 inspiredlife.fun, 1 -inspiredrealtyinc.com, 1 inspireplanner.com, 1 inspiresurgery.com, 1 inspirez-vous-sophro.com, 1 @@ -71057,7 +71049,6 @@ institutodyn.com, 1 institutoessencia.com, 1 institutogiuseppe.com, 1 institutogiuseppe.com.ar, 1 -institutolancaster.com, 1 institutoliderar.edu.co, 1 institutomaritimocolombiano.com, 1 institutulcultural.ro, 1 @@ -77545,6 +77536,7 @@ kesse.ru, 1 kessel-runners.com, 1 kesselrun.goip.de, 1 kesslerandsons.com, 1 +kesslerwine.com, 1 kesteren.org, 1 ketamine.co.uk, 1 ketamine.uk, 1 @@ -79126,7 +79118,6 @@ kong.ink, 1 kongar.org, 1 kongjie.cf, 1 kongjie.ml, 1 -kongress-hostessen.de, 1 konicaprinterdriver.com, 0 koniecfica.sk, 0 konijnen-knaagdieren.tk, 1 @@ -82034,6 +82025,7 @@ leapworks.io, 1 leapxx.com, 1 leapxx.pro, 1 lear.com.br, 1 +leardev.de, 1 learn-everything.info, 1 learn-freely.com, 1 learn-smart.uk, 1 @@ -84527,7 +84519,6 @@ lizzysdoggrooming.com, 1 lizzythepooch.com, 1 lj-creation.com, 1 ljason.cn, 1 -ljc.ro, 1 ljekarne-plantak.hr, 1 ljoonal.xyz, 1 ljpc-hosting.nl, 1 @@ -86223,7 +86214,7 @@ lux-house.tk, 1 luxanos.com, 1 luxarchive.tk, 1 luxaterra.com, 1 -luxcraft.eng.br, 1 +luxcraft.eng.br, 0 luxden.com, 1 luxe-in.gr, 1 luxe.digital, 1 @@ -86688,7 +86679,6 @@ maddi.biz, 1 maddie.gay, 1 maddin.ga, 1 made-dwell.com, 1 -made-in-earth.co.jp, 1 made-to-usb.com, 1 made.md, 1 made2coach.com, 1 @@ -89044,7 +89034,7 @@ matthewkenny.co.uk, 1 matthewkerley.com, 1 matthewlankford.com, 1 matthewljiang.com, 1 -matthewohare.com, 1 +matthewohare.com, 0 matthewoliver.com, 1 matthewoshea.tk, 1 matthewprenger.com, 1 @@ -91455,6 +91445,7 @@ mh2.at, 1 mha.fi, 1 mhabdullah.tk, 1 mhadegree.org, 1 +mhadot.com, 1 mhainfantandtoddler.com, 1 mhalfter.de, 1 mhammerbacher.me, 1 @@ -92666,7 +92657,6 @@ misfit-media.com, 1 mishamayfairart.com, 1 mishaomar.tk, 1 mishavayner.com, 1 -mishkan-israel.net, 1 mishkinn.ru, 1 mishkovskyi.net, 1 mishpatim.tk, 1 @@ -98327,6 +98317,7 @@ netsite.dk, 1 netslum.tk, 1 netsoftit.com, 1 netsoins.org, 1 +netsparker.com.tr, 0 netspeedia.net, 1 netsphere.cloud, 1 netsphere.cz, 1 @@ -101954,7 +101945,6 @@ ohype.gq, 1 oi-wiki.org, 1 oiahe.org.uk, 1 oiaposta.com, 1 -oic-ci.gc.ca, 1 oidrava.tk, 1 oikontroloi.tk, 1 oikosweb.com, 1 @@ -104951,7 +104941,6 @@ panascais.host, 1 panascais.info, 1 panascais.io, 1 panascais.me, 1 -panascais.net, 1 panascais.network, 1 panascais.nl, 1 panascais.org, 1 @@ -106410,7 +106399,6 @@ peercraft.us, 1 peerjs.com, 1 peername.com, 1 peerpressurecreative.com, 1 -peers.cloud, 1 peers.gq, 1 peers.tk, 1 peersquaders.ga, 1 @@ -107958,7 +107946,6 @@ pildat.org, 1 pilgermaske.org, 1 pili-serv.ovh, 1 piliszek.net, 1 -pill.id, 1 pillar.fi, 1 pillar.ninja, 1 pillar.us, 1 @@ -110033,7 +110020,6 @@ postblue.info, 1 postbox.life, 1 postcardpayment.com, 1 postcards.tk, 1 -postcode.nl, 1 postcodeswag.co.uk, 1 postcodeswag.com, 1 postcodeswag.uk, 1 @@ -110292,6 +110278,7 @@ pozitiffchik.tk, 1 pozitiv.gq, 1 pozitone.com, 1 poziworld.com, 1 +poznajrynek.pl, 1 poznavatelno.ml, 1 pozzitiv.ro, 1 pp.es, 1 @@ -113068,7 +113055,6 @@ qualitysistemas.com.br, 1 qualitytitlepaducah.com, 1 qualitywaterproofingco.com, 1 qualityworks.tk, 1 -qualpay.com, 1 qualtrics.com, 1 qualyven.com, 1 quandoandare.it, 1 @@ -115118,7 +115104,6 @@ reddingo.com, 1 reddingo.com.au, 1 reddingo.de, 1 reddingo.es, 1 -reddingo.eu, 1 reddingo.fr, 1 reddingo.it, 1 reddingo.jp, 1 @@ -116387,7 +116372,6 @@ reversecanada.com, 1 reversecrucifixkm.altervista.org, 1 reversedns.tk, 1 reverseloansolutions.com, 1 -reverselookupphone.us, 1 reversemortgageguides.com, 1 reversemortgageguides.org, 1 reversesouthafrica.com, 1 @@ -118096,11 +118080,9 @@ royal856.com, 1 royal857.com, 1 royal859.com, 1 royal86.com, 1 -royal861.com, 1 royal862.com, 1 royal863.com, 1 royal865.com, 1 -royal867.com, 1 royal868.com, 1 royal869.com, 1 royal876.com, 1 @@ -121285,6 +121267,7 @@ script.google.com, 1 scripter.co, 1 scriptgates.ru, 0 scripthost.org, 1 +scriptjunkie.us, 1 scriptline.ga, 1 scriptmaker.tk, 1 scriptnav.com, 1 @@ -128580,7 +128563,6 @@ sshwiki.tk, 1 sshx.top, 1 ssk.ovh, 1 sskb-ey.tech, 1 -ssky.cn, 1 ssl-zertifikate.de, 1 ssl.com.ru, 1 ssl.google-analytics.com, 1 @@ -132619,7 +132601,6 @@ tallercs.tk, 1 talleresluse.com, 1 tallgrasslegal.com, 1 tallinn-airport.ee, 0 -tallinnsec.ee, 1 tallinnsex.ee, 1 tallship.cz, 1 tallulahbernard.com, 1 @@ -134121,7 +134102,7 @@ tellusaboutus.com, 1 telly.site, 1 telly.wtf, 1 tellygames.com, 1 -tellyourtale.com, 0 +tellyourtale.com, 1 telnet.dk, 1 telokchki.ga, 1 telokchki.ml, 1 @@ -138279,7 +138260,6 @@ totalbyverizon.com, 1 totalcarcheck.co.uk, 1 totalcare.co.nz, 1 totalcarpetcare.co.uk, 1 -totalchecklist.com, 1 totalcontrols.eu, 1 totalemaildelivery.com, 1 totalenergies.ca, 1 @@ -140640,6 +140620,7 @@ tutorialinux.com, 1 tutorialitmalaysia.tk, 1 tutorialphotoshop.tk, 1 tutorials.vg, 1 +tutorialseo.com.br, 1 tutoriel-arduino.com, 1 tutoringindustry.tk, 1 tutorio.ga, 1 @@ -143181,7 +143162,6 @@ valshamar.is, 1 valskis.lt, 1 valsorey.ch, 0 valtherperron.nl, 1 -valtlai.fi, 1 valtoaho.com, 1 valtool.uk, 1 valudo.st, 1 @@ -144519,7 +144499,6 @@ viikko.gq, 1 viikko.ml, 1 viilup.com, 1 viitanen.xyz, 1 -vijay-international.com, 1 vijayam.ml, 1 vijaymishra.tk, 1 vijn.io, 1 @@ -147709,7 +147688,6 @@ websuccess.ga, 1 websvetaines.lt, 1 webtalis.nl, 1 webtasarim.info.tr, 1 -webtasarim.pw, 1 webtasarimankara.name.tr, 1 webtasarimi.tk, 1 webtasarimostim.name.tr, 1 @@ -147759,7 +147737,6 @@ webwinkelkeur.nl, 1 webwinkelwestland.nl, 1 webwweb.com.pl, 1 webyazilim.biz.tr, 1 -webyazilimankara.com, 1 webycrea.eu, 1 webyildiz.com, 1 webyourself.eu, 1 @@ -152028,7 +152005,6 @@ xp.nsupdate.info, 1 xpd.se, 1 xpenology-fr.net, 1 xperiacode.com, 1 -xperidia.com, 1 xpertairtx.com, 1 xpertairwaco.com, 1 xpertcenter.ch, 0 diff --git a/services/settings/dumps/blocklists/addons-bloomfilters.json b/services/settings/dumps/blocklists/addons-bloomfilters.json index cbd7ffa0c2e6..13072447fcd0 100644 --- a/services/settings/dumps/blocklists/addons-bloomfilters.json +++ b/services/settings/dumps/blocklists/addons-bloomfilters.json @@ -1,5 +1,93 @@ { "data": [ + { + "stash": { + "blocked": [ + "{4e023032-b2c9-46f1-a459-6eaa627a7d7e}:1.22.301", + "{4e023032-b2c9-46f1-a459-6eaa627a7d7e}:1.22.1006" + ], + "unblocked": [] + }, + "schema": 1692210975980, + "key_format": "{guid}:{version}", + "stash_time": 1692275711103, + "id": "e92a253b-f7ad-4559-bceb-ce9103a158a4", + "last_modified": 1692275774370 + }, + { + "stash": { + "blocked": [ + "db4ef720-0692-11ec-9cfe-bacbbe07b880-prod@whatfix.com:2021.10.21.1403", + "db4ef720-0692-11ec-9cfe-bacbbe07b880-prod@whatfix.com:2021.10.18.1308", + "ClearURLs@cqdgh.net:1.26.1", + "admins@agorganizer:0.2.0", + "{ad0d925d-88f8-47f1-85ea-8463569e756e}:3.0.8", + "admins@agorganizer:0.1.2", + "db4ef720-0692-11ec-9cfe-bacbbe07b880-prod@whatfix.com:2021.10.18.1049", + "db4ef720-0692-11ec-9cfe-bacbbe07b880-prod@whatfix.com:2021.10.21.1402", + "{bb8f9609-8b36-4f8d-8a61-996fa6bd486b}:4.1.57", + "db4ef720-0692-11ec-9cfe-bacbbe07b880-prod@whatfix.com:2021.8.26.1728", + "admins@agorganizer:0.1.9", + "db4ef720-0692-11ec-9cfe-bacbbe07b880-prod@whatfix.com:2021.9.30.1001", + "db4ef720-0692-11ec-9cfe-bacbbe07b880-prod@whatfix.com:2021.10.27.1428", + "db4ef720-0692-11ec-9cfe-bacbbe07b880-prod@whatfix.com:2021.10.14.1817", + "admins@agorganizer:0.5.0", + "admins@agorganizer:0.1.7", + "{20f4ba48-29dc-4f7e-815d-ee80f015bd16}:3.6.17", + "db4ef720-0692-11ec-9cfe-bacbbe07b880-prod@whatfix.com:2021.10.19.1913", + "admins@agorganizer:0.4.0", + "db4ef720-0692-11ec-9cfe-bacbbe07b880-prod@whatfix.com:2021.10.21.1407", + "admins@agorganizer:0.1.6", + "db4ef720-0692-11ec-9cfe-bacbbe07b880-prod@whatfix.com:2021.9.7.1508", + "{a6e85ac7-b189-47da-a127-289a1e2579dc}:4.1.56", + "enhancerforyoutube-updated@maximerf.addons.mozilla.org:2.0.117.12", + "db4ef720-0692-11ec-9cfe-bacbbe07b880-prod@whatfix.com:2021.8.26.1733", + "admins@agorganizer:0.1.0", + "admins@agorganizer:0.1.1", + "db4ef720-0692-11ec-9cfe-bacbbe07b880-prod@whatfix.com:2021.10.27.1242", + "enhancerforyoutube-updated@maximerf.addons.mozilla.org:2.0.117.11", + "{a19c59c4-1874-44d3-8e8c-194de6e5d529}:3.15.2", + "admins@agorganizer:0.1.8", + "admins@agorganizer:0.1.5", + "admins@agorganizer:0.3.0", + "admins@agorganizer:0.1.3", + "{626aa86a-8a5a-4cc6-b76c-f4862fc6153c}:3.12", + "nested-tab-groups@LCS:5.2" + ], + "unblocked": [] + }, + "schema": 1692196662087, + "key_format": "{guid}:{version}", + "stash_time": 1692210911477, + "id": "26405f17-8f3b-4094-ba22-d87ae6d34c04", + "last_modified": 1692210975875 + }, + { + "stash": { + "blocked": [ + "{a09924c5-b883-49c3-8498-2669056ff050}:1.3.16" + ], + "unblocked": [] + }, + "schema": 1692016575686, + "key_format": "{guid}:{version}", + "stash_time": 1692038111169, + "id": "196ae4f6-1899-4395-8d56-3b817d1d9471", + "last_modified": 1692038172459 + }, + { + "stash": { + "blocked": [ + "{7c43c81c-c721-4b67-becd-1050f493a5a3}:2.8.1" + ], + "unblocked": [] + }, + "schema": 1692012897279, + "key_format": "{guid}:{version}", + "stash_time": 1692016511048, + "id": "0508a284-b44f-469f-988b-030fef7f4134", + "last_modified": 1692016575597 + }, { "stash": { "blocked": [ @@ -31,5 +119,5 @@ "last_modified": 1690223886167 } ], - "timestamp": 1690828579402 + "timestamp": 1692275774370 } diff --git a/services/settings/dumps/security-state/intermediates.json b/services/settings/dumps/security-state/intermediates.json index dc0a25503b93..fccdf8543142 100644 --- a/services/settings/dumps/security-state/intermediates.json +++ b/services/settings/dumps/security-state/intermediates.json @@ -1,5 +1,41 @@ { "data": [ + { + "schema": 1692154077124, + "derHash": "ZSPDTx6Hmt12A8sgSKiYpeLwxsS1EsDSJ4K4XUOuM3E=", + "subject": "CN=DigiCert Global Root G2,OU=www.digicert.com,O=DigiCert Inc,C=US", + "subjectDN": "MGExCzAJBgNVBAYTAlVTMRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IEcy", + "whitelist": false, + "attachment": { + "hash": "1faa137dd2ee40cf50b2a051a7173d1010108a663e5440ea1fbac6c0031bf529", + "size": 1622, + "filename": "i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl_s2uC_CY=.pem", + "location": "security-state-staging/intermediates/104e770c-06a1-4448-b8d3-2f728cdcec56.pem", + "mimetype": "application/x-pem-file" + }, + "pubKeyHash": "i7WTqTvh0OioIruIfFR4kMPnBqrS2rdiVPl/s2uC/CY=", + "crlite_enrolled": false, + "id": "44effbc9-9ad4-4720-a022-dae2b23ec1d9", + "last_modified": 1692154623711 + }, + { + "schema": 1692154076819, + "derHash": "7e3QBTy4RFkuZz7yoIHBWzjuPsvrWFbJpP6bcWn6/+c=", + "subject": "CN=CrowdStrike Federal EV RSA CA G1,O=CrowdStrike\\, Inc.,C=US", + "subjectDN": "MFQxCzAJBgNVBAYTAlVTMRowGAYDVQQKExFDcm93ZFN0cmlrZSwgSW5jLjEpMCcGA1UEAxMgQ3Jvd2RTdHJpa2UgRmVkZXJhbCBFViBSU0EgQ0EgRzE=", + "whitelist": false, + "attachment": { + "hash": "c585aeefd429ffa446cafab9abe59c8d732dd69f53b70ea3fc57cbb15df590df", + "size": 2056, + "filename": "jlNmuWU1h89xgXejpUIIUrORzlvSrzWGeDUMnmVY_c0=.pem", + "location": "security-state-staging/intermediates/e8217047-9ec4-482d-a6b7-6f791422852c.pem", + "mimetype": "application/x-pem-file" + }, + "pubKeyHash": "jlNmuWU1h89xgXejpUIIUrORzlvSrzWGeDUMnmVY/c0=", + "crlite_enrolled": false, + "id": "970d042d-6df8-4a99-a686-c6a5f58570e2", + "last_modified": 1692154623708 + }, { "schema": 1691743681420, "derHash": "DtVnGu6WFs3norGz3SOYtuEeWR2pdEki2MMtF/Z8ypM=", @@ -28855,5 +28891,5 @@ "last_modified": 1559865863642 } ], - "timestamp": 1691765823425 + "timestamp": 1692154623711 }