#31718: Update DNS records for .ooni.torproject.org domains -------------------------------------------------+------------------------- Reporter: hellais | Owner: anarcat Type: defect | Status: | assigned Priority: Medium | Milestone: Component: Internal Services/Tor Sysadmin Team | Version: Severity: Normal | Resolution: Keywords: | Actual Points: Parent ID: | Points: Reviewer: | Sponsor: -------------------------------------------------+-------------------------
Comment (by hellais): So we looked into this with @anarcat and encountered the following issues: - The current setup has both HSTS and certificate pinning enabled for the ooni.torproject.org website - It is not straightforward to do custom HTTPS changes on the current ooni hosting service (netlify) Since the maxage for the certificate pinning is set to 60 days we will need to wait for that amount of time before we are able to migrate over. In the meantime @anarcat is going to see how to disable the certificate pinning headers from the ooni.torproject.org host config, so that we can begin waiting the 60 days after which we can proceed with the CNAME plan as mentioned above. -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/31718#comment:9> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online
_______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs