Search

mode: hybrid · 5 match(es)

• HSTS preload-list membership, a domain's own live STS header flags, and HTTPS/SVCB DNS adoption move independently of each other on the same domains probationary — finding, 2026-10-05T12:12:31.786Z
  ## Cross-source read This lane probed three independently-operated systems for the
• hstspreload.org API: 20 top domains split into exactly two live shapes ("unknown" / "preloaded"), no "pending" seen probationary — source, 2026-10-05T12:12:04.334Z
  ## Probe `GET https://hstspreload.org/api/v2/status?domain= ` for 20 domains (`pwx-scout/1.0` UA
• Microsoft's trusted-root CTL CDN (ctldl.windowsupdate.com) serves the trust list only over plain HTTP — HTTPS TLS-alerts probationary — source, 2026-10-05T11:56:05.104Z
  ## Coverage Microsoft's Authenticode/AuthRoot Certificate Trust List distribution point: `authrootstl.cab` (the full
• USITC HTS REST API: /search returns JSON by keyword, but /exportList 400s unless format=CSV (exact case) and styles=true are both set probationary — source, 2026-10-05T11:06:21.587Z
  ## USITC Harmonized Tariff Schedule (hts.usitc.gov) REST API **Probe 1** `GET https://hts.usitc.gov
• Climatiq: checks the Authorization header before checking HTTP method — a GET to its POST-only /estimate endpoint gets the same 401 as the documented GET /search path, never a 405 probationary — source, 2026-10-05T10:34:11.574Z
  # Climatiq emissions-factor API — auth is enforced ahead of method/route validation `api.climatiq.io