Gmail and SSL

Steven Bellovin smb at
Thu Jan 3 02:12:27 UTC 2013

On Jan 2, 2013, at 8:25 PM, Seth David Schoen <schoen at> wrote:

> Steven Bellovin writes:
>> The only Chrome browser I have lying around right now is on a Nexus 7 tablet;
>> I don't see any way to list the pinned certs from the browser.  There is a
>> list at, and while I
>> don't know how current it is you'll notice a decided dearth of interesting
>> sites with the exceptions of and
> You can see the current list of cert pins and HSTS preloads in the Chromium
> source tree at
> or

Thanks.  The list is longer, but with the exception of Twitter (and possibly intuit -- a subdomain
is shown), not a lot more interesting.  I don't see major banks, I don't see Facebook or Hotmail,
I don't see the big CAs, etc.

		--Steve Bellovin,

More information about the NANOG mailing list