| commit | cb76ac67dca0a133cdfa96678ac5cd2a65af96a3 | |
| author | Adam Rice <ricea@chromium.org> | |
| Fri, 20 Feb 2015 05:33:25 +0000 (20 14:33 +0900) | ||
| committer | Adam Rice <ricea@chromium.org> | |
| Fri, 20 Feb 2015 05:35:09 +0000 (20 05:35 +0000) | ||
| tree | a9ca07e14b06bbf44a07e16214434846c610fee5 | treesnapshot (tar.gz zip) |
| parent | 823988c5d8dbc7756882a86fa471b542310739e8 | commitdiff |
Apply HSTS to WebSocket connections.
With this change, ws: connections to hosts which have an existing HSTS
pin will be automatically changed to use wss:, ie. SSL.
In addition, Strict-Transport-Security headers that are sent from a wss:
server with a valid SSL certificate will be enforced on subsequent ws:
and http: connections to the same host.
This CL also modifies HttpNetworkTransaction to treat wss: the same as
https:.
BUG=455215, 446480
TEST=net_unittests
R=rsleevi@chromium.org, tyoshino@chromium.org
Review URL: https://codereview.chromium.org/903553005
Cr-Commit-Position: refs/heads/master@{#317252}
With this change, ws: connections to hosts which have an existing HSTS
pin will be automatically changed to use wss:, ie. SSL.
In addition, Strict-Transport-Security headers that are sent from a wss:
server with a valid SSL certificate will be enforced on subsequent ws:
and http: connections to the same host.
This CL also modifies HttpNetworkTransaction to treat wss: the same as
https:.
BUG=455215, 446480
TEST=net_unittests
R=rsleevi@chromium.org, tyoshino@chromium.org
Review URL: https://codereview.chromium.org/903553005
Cr-Commit-Position: refs/heads/master@{#317252}
12 files changed: