services/network/public/mojom/key_pinning.mojom

// Copyright 2022 The Chromium Authors
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

module network.mojom;

import "services/network/public/mojom/hash_value.mojom";

// Structure used to hold information about a specific pinset.
struct PinSet {
  // Name of the pinset.
  string name;
  // Set of allowed SPKIs hashes.
  array<SHA256HashValue> static_spki_hashes;
  // Optional set of forbidden SPKIs hashes
  array<SHA256HashValue> bad_static_spki_hashes;
};

struct PinSetInfo {
  // Hostname this pinset applies to.
  string hostname;
  // Name of the pinset.
  string pinset_name;
  // Whether this pinset applies to subdomains.
  bool include_subdomains;
};

struct PinList {
  // All known pinsets.
  array<PinSet> pinsets;
  // List of known hosts with pins. Each element represents a different
  // hostname, and includes the name of the pinset that applies to it, and
  // whether it applies to subdomains.
  array<PinSetInfo> host_pins;
};