Skip to content

Commit 209c8a0

Browse files
gloomy-ghostJ0WI
authored andcommitted
Update Verisign.xml (EFForg#6944)
* Update Verisign.xml Remove wildcard Ref: EFForg#6909 * Update Verisign.xml Remove ssl-certificate-center*, trust-center* (Protocol error) Remove knowledge* (Expired) Remove www.verisign.* (Mismatch) * Update Verisign.xml Clean rule
1 parent 3783e92 commit 209c8a0

1 file changed

Lines changed: 66 additions & 90 deletions

File tree

Lines changed: 66 additions & 90 deletions
Original file line numberDiff line numberDiff line change
@@ -1,153 +1,129 @@
11
<!--
2-
bad certificate error:
2+
Problematic domains:
3+
Mismatch
4+
- forms.verisign.com
5+
- www.verisign.be
6+
- verisign.co.nz
7+
- www.verisign.co.nz
8+
- verisign.de
9+
- www.verisign.de
10+
- verisign.it
11+
- www.verisign.it
12+
- verisign.nl
13+
- www.verisign.nl
14+
15+
Timeout
316
- mygatekeeper.verisign.com.au
417
18+
Expired:
19+
- knowledge.verisign.ch
20+
- labs.verisign.com
21+
- knowledge.verisign.com.au
22+
- knowledge.verisign.com.hk
23+
- knowledge.verisign.com.sg
24+
- knowledge.verisign.com.tw
25+
- knowledge.verisign.co.nz
26+
- knowledge.verisign.co.uk
27+
- knowledge.verisign.dk
28+
- knowledge.verisign.de
29+
- knowledge.verisign.es
30+
- knowledge.verisign.fr
31+
- knowledge.verisign.se
32+
33+
Protocol error
34+
- ssl-certificate-center.verisign.ch
35+
- trust-center.verisign.ch
36+
- ssl-certificate-center.verisign.com.au
37+
- trust-center.verisign.com.au
38+
- ssl-certificate-center.verisign.com.hk
39+
- trust-center.verisign.com.sg
40+
- ssl-certificate-center.verisign.com.sg
41+
- trust-center.verisign.com.tw
42+
- ssl-certificate-center.verisign.com.tw
43+
- trust-center.verisign.co.uk
44+
- ssl-certificate-center.verisign.co.uk
45+
- trust-center.verisign.dk
46+
- ssl-certificate-center.verisign.dk
47+
- trust-center.verisign.de
48+
- ssl-certificate-center.verisign.de
49+
- trust-center.verisign.es
50+
- ssl-certificate-center.verisign.es
51+
- trust-center.verisign.fr
52+
- ssl-certificate-center.verisign.fr
53+
- trust-center.verisign.se
54+
- ssl-certificate-center.verisign.se
55+
556
Other Symantec rulesets:
657
758
- Symantec.xml
859
- Verisign_Labs.com.xml
960
1061
-->
1162
<ruleset name="VeriSign (partial)">
12-
13-
<target host="verisign.be"/>
14-
<target host="www.verisign.be"/>
15-
1663
<target host="verisign.ch"/>
17-
<target host="knowledge.verisign.ch"/>
18-
<target host="ssl-certificate-center.verisign.ch"/>
19-
<target host="trust-center.verisign.ch"/>
2064
<target host="www.verisign.ch"/>
2165

2266
<target host="verisign.com"/>
23-
<target host="*.verisign.com" />
24-
<!-- Observed subdomains:
25-
26-
- blogs
27-
- enterprise-ssl-admin
28-
- extended-validation-ssl
29-
- idprotect
30-
- idefense
31-
- investor
32-
- labs
33-
- mdns
34-
- products
35-
- seal
36-
- sealinfo
37-
- ssl-certificate-center
38-
- trust-center
39-
- trustsealinfo
40-
- vidn
41-
- www
42-
-->
67+
<target host="www.verisign.com" />
68+
<!-- Incomplete certificate chain
69+
target host="blogs.verisign.com" /-->
70+
<target host="extended-validation-ssl.verisign.com" />
71+
<target host="idprotect.verisign.com" />
72+
<target host="idefense.verisign.com" />
73+
<target host="investor.verisign.com" />
74+
<target host="mdns.verisign.com" />
75+
<target host="seal.verisign.com" />
76+
<target host="sealinfo.verisign.com" />
77+
<target host="trustsealinfo.verisign.com" />
78+
<test url="http://trustsealinfo.verisign.com/splash?form_file=fdf/splash.fdf&amp;dn=" />
79+
<target host="vidn.verisign.com" />
4380

4481
<target host="verisign.com.au"/>
45-
<target host="knowledge.verisign.com.au"/>
46-
<target host="ssl-certificate-center.verisign.com.au"/>
4782
<target host="tracking.verisign.com.au"/>
48-
<target host="trust-center.verisign.com.au"/>
4983
<target host="www.verisign.com.au"/>
5084

5185
<target host="verisign.com.br"/>
5286
<target host="www.verisign.com.br"/>
5387

5488
<target host="verisign.com.hk"/>
55-
<target host="knowledge.verisign.com.hk"/>
56-
<target host="ssl-certificate-center.verisign.com.hk"/>
5789
<target host="tracking.verisign.com.hk"/>
5890
<target host="www.verisign.com.hk"/>
5991

6092
<target host="verisign.com.sg"/>
61-
<target host="knowledge.verisign.com.sg"/>
62-
<target host="ssl-certificate-center.verisign.com.sg"/>
63-
<target host="trust-center.verisign.com.sg"/>
6493
<target host="www.verisign.com.sg"/>
6594

6695
<target host="verisign.com.tw"/>
67-
<target host="knowledge.verisign.com.tw"/>
68-
<target host="ssl-certificate-center.verisign.com.tw"/>
6996
<target host="tracking.verisign.com.tw"/>
70-
<target host="trust-center.verisign.com.tw"/>
7197
<target host="www.verisign.com.tw"/>
7298

7399
<target host="verisign.co.jp"/>
74-
<target host="storefront.verisign.co.jp"/>
75100
<target host="www.verisign.co.jp"/>
76101

77-
<target host="verisign.co.nz"/>
78-
<target host="knowledge.verisign.co.nz"/>
79102
<target host="tracking.verisign.co.nz"/>
80-
<target host="www.verisign.co.nz"/>
81103

82104
<target host="verisign.co.uk"/>
83-
<target host="knowledge.verisign.co.uk"/>
84-
<target host="ssl-certificate-center.verisign.co.uk"/>
85-
<target host="trust-center.verisign.co.uk"/>
86105
<target host="www.verisign.co.uk"/>
87106

88107
<target host="verisign.dk"/>
89-
<target host="knowledge.verisign.dk"/>
90-
<target host="ssl-certificate-center.verisign.dk"/>
91-
<target host="trust-center.verisign.dk"/>
92108
<target host="www.verisign.dk"/>
93109

94-
<target host="verisign.de"/>
95-
<target host="knowledge.verisign.de"/>
96-
<target host="ssl-certificate-center.verisign.de"/>
97-
<target host="trust-center.verisign.de"/>
98-
<target host="www.verisign.de"/>
99-
100110
<target host="verisign.es"/>
101-
<target host="knowledge.verisign.es"/>
102-
<target host="ssl-certificate-center.verisign.es"/>
103-
<target host="trust-center.verisign.es"/>
104111
<target host="www.verisign.es"/>
105112

106113
<target host="verisign.fr"/>
107-
<target host="knowledge.verisign.fr"/>
108-
<target host="ssl-certificate-center.verisign.fr"/>
109-
<target host="trust-center.verisign.fr"/>
110114
<target host="www.verisign.fr"/>
111115

112-
<target host="verisign.it"/>
113-
<target host="www.verisign.it"/>
114-
115-
<target host="verisign.nl"/>
116-
<target host="www.verisign.nl"/>
117-
118116
<target host="verisign.se"/>
119-
<target host="knowledge.verisign.se"/>
120-
<target host="ssl-certificate-center.verisign.se"/>
121-
<target host="trust-center.verisign.se"/>
122117
<target host="www.verisign.se"/>
123118

124119
<target host="knowledge.verisign-grs.com"/>
125120

126121
<target host="verisigninc.com"/>
127122
<target host="www.verisigninc.com"/>
128123

129-
<target host="verisign-japan-domain.com"/>
130124
<target host="www.verisign-japan-domain.com"/>
131125

132-
<exclusion pattern="^http://verisigntransition101\.verisign\.[\w.]{2,6}/" />
133-
<exclusion pattern="^http://[\w-]*ocsp\.verisign\.com" />
134-
135-
<test url="http://trustsealinfo.verisign.com/splash?form_file=fdf/splash.fdf&amp;dn=" />
136-
137-
138126
<securecookie host="^(?:.*\.)?verisign(?:inc)?\.com$" name=".*"/>
139127

140-
141-
<rule from="^http://(?:www\.)?verisign\.([\w.]{2,6})/"
142-
to="https://www.verisign.$1/"/>
143-
144-
<rule from="^http://([\w-]+)\.verisign\.([\w.]{2,6})/"
145-
to="https://$1.verisign.$2/"/>
146-
147-
<rule from="^http://knowledge\.verisign-grs\.com/"
148-
to="https://knowledge.verisign-grs.com/"/>
149-
150-
<rule from="^http://(?:www\.)?verisign(inc|-japan-domain)\.com/"
151-
to="https://www.verisign$1.com/"/>
152-
128+
<rule from="^http:" to="https:" />
153129
</ruleset>

0 commit comments

Comments
 (0)