feat(wallet): pin all *.wallet.brave.com subdomains via HSTS + HPKP (#34859)

* Add api.gate3.brave.com to transport security state

* chore: add wallet.brave.com subdomain
This commit is contained in:
Kyle Den Hartog
2026-03-21 09:48:17 +13:00
committed by GitHub
parent c11e31c388
commit 22ade08c0e
@@ -93,6 +93,8 @@ constexpr std::string_view kBravePinsJson = R"brave_pins_json({
{ "name": "publishers.brave.com", "pins": "brave"},
// Wallet
{ "name": "wallet.brave.com", "include_subdomains": true, "pins": "brave"},
{ "name": "api.gate3.brave.com", "pins": "brave"},
{ "name": "goerli-infura.brave.com", "pins": "brave"},
{ "name": "sepolia-infura.brave.com", "pins": "brave"},
{ "name": "mainnet-infura.brave.com", "pins": "brave"},
@@ -325,6 +327,17 @@ constexpr std::string_view kBraveHstsJson = R"brave_hsts_json({
},
// Wallet
{
"name": "wallet.brave.com",
"include_subdomains": true,
"mode": "force-https",
"policy": "custom"
},
{
"name": "api.gate3.brave.com",
"mode": "force-https",
"policy": "custom"
},
{
"name": "goerli-infura.brave.com",
"mode": "force-https",