net: sort initial sections of the HSTS list.

This change has no semantic effect.

This change sorts some of the early sections of the HSTS JSON file using
sort(1). This does not alter the generated .h file at all, since the
generation script already effectively sorts the values by building a
tree from them.

Cr-Commit-Position: refs/heads/master@{#369589}

1 files changed, 84 insertions, 86 deletions

diff --git a/net/http/transport_security_state_static.json b/net/http/transport_security_state_static.json
index c39cd70..4e7e9eb 100644
--- a/net/http/transport_security_state_static.json
+++ b/net/http/transport_security_state_static.json
@@ -210,89 +210,86 @@
     { "name": "pinning-test.badssl.com", "include_subdomains": true, "pins": "test" },
     { "name": "preloaded-expect-ct.badssl.com", "expect_ct": true, "expect_ct_report_uri": "https://report.badssl.com/expect-ct" },
 
-    // (*.)google.com, iff using SSL, must use an acceptable certificate.
-    { "name": "google.com", "include_subdomains": true, "pins": "google" },
-
     // Now we force HTTPS for subtrees of google.com.
-    { "name": "wallet.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "accounts.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "admin.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "appengine.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "checkout.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "chrome.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "cloud.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "contributor.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "docs.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "domains.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "sites.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "spreadsheets.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "appengine.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "encrypted.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "accounts.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "profiles.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "fi.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "glass.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "goto.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "hangouts.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "history.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "hostedtalkgadget.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "inbox.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "login.corp.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "mail.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "mail-settings.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "inbox.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "talkgadget.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "talk.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "hostedtalkgadget.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "myaccount.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "passwords.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "pixel.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "play.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "plus.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "plus.sandbox.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "profiles.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "script.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "hangouts.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "history.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "security.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "goto.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "cloud.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "glass.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "admin.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "login.corp.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "play.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "passwords.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "myaccount.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "contributor.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "fi.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "sites.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "spreadsheets.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "talkgadget.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "talk.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "wallet.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "xn--7xa.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "pixel.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
 
     // Other Google-related domains that must use HTTPS.
-    { "name": "google", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "gmail.com", "mode": "force-https", "pins": "google" },
-    { "name": "googlemail.com", "mode": "force-https", "pins": "google" },
-    { "name": "www.gmail.com", "mode": "force-https", "pins": "google" },
-    { "name": "www.googlemail.com", "mode": "force-https", "pins": "google" },
-    { "name": "chrome.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "market.android.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "ssl.google-analytics.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "drive.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "googleplex.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "groups.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "apis.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "chromiumcodereview.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "build.chromium.org", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "chrome.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "chrome-devtools-frontend.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "chromiumcodereview.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "code.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "codereview.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "build.chromium.org", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "codereview.chromium.org", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "code.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "googlecode.com", "include_subdomains": true, "pins": "google" },
     { "name": "dl.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "translate.googleapis.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "drive.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "g4w.co", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "gmail.com", "mode": "force-https", "pins": "google" },
+    { "name": "googlecode.com", "include_subdomains": true, "pins": "google" },
+    { "name": "google", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "googlemail.com", "mode": "force-https", "pins": "google" },
+    { "name": "googleplex.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "groups.google.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "gvt2.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "gvt3.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "withyoutube.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "market.android.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "ssl.google-analytics.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "translate.googleapis.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "withgoogle.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "g4w.co", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "withyoutube.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "www.gmail.com", "mode": "force-https", "pins": "google" },
+    { "name": "www.googlemail.com", "mode": "force-https", "pins": "google" },
 
     { "name": "webfilings.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "webfilings-mirror-hrd.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "webfilings-eu.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "webfilings-eu-mirror.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "webfilings-mirror-hrd.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "wf-bigsky-master.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "wf-demo-eu.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "wf-demo-hrd.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "wf-dogfood-hrd.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "wf-pentest.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "wf-trial-hrd.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "xbrlsuccess.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "w-spotlight.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "wf-training-hrd.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "wf-bigsky-master.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "wf-staging-hr.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "wf-training-hrd.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
     { "name": "wf-training-master.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
-    { "name": "wf-dogfood-hrd.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "wf-trial-hrd.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "w-spotlight.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
+    { "name": "xbrlsuccess.appspot.com", "include_subdomains": true, "mode": "force-https", "pins": "google" },
 
     // chart.apis.google.com is *not* HSTS because the certificate doesn't match
     // and there are lots of links out there that still use the name. The correct
@@ -301,36 +298,23 @@
 
     // Other Google-related domains that must use an acceptable certificate
     // iff using SSL.
-    { "name": "blogger.com", "include_subdomains": true, "pins": "google" },
-    { "name": "google-analytics.com", "include_subdomains": true, "pins": "google" },
-    { "name": "googlegroups.com", "include_subdomains": true, "pins": "google" },
-    { "name": "ytimg.com", "include_subdomains": true, "pins": "google" },
-    { "name": "googleusercontent.com", "include_subdomains": true, "pins": "google" },
-    { "name": "youtube.com", "include_subdomains": true, "pins": "google" },
-    { "name": "youtube-nocookie.com", "include_subdomains": true, "pins": "google" },
-    { "name": "googleapis.com", "include_subdomains": true, "pins": "google" },
-    { "name": "googleadservices.com", "include_subdomains": true, "pins": "google" },
-    { "name": "appspot.com", "include_subdomains": true, "pins": "google" },
-    { "name": "googlesyndication.com", "include_subdomains": true, "pins": "google" },
-    { "name": "doubleclick.net", "include_subdomains": true, "pins": "google" },
     { "name": "2mdn.net", "include_subdomains": true, "pins": "google" },
-    { "name": "gstatic.com", "include_subdomains": true, "pins": "google" },
-    { "name": "youtu.be", "include_subdomains": true, "pins": "google" },
     { "name": "android.com", "include_subdomains": true, "pins": "google" },
-    { "name": "googlecommerce.com", "include_subdomains": true, "pins": "google" },
-    { "name": "urchin.com", "include_subdomains": true, "pins": "google" },
-    { "name": "goo.gl", "include_subdomains": true, "pins": "google" },
+    { "name": "appspot.com", "include_subdomains": true, "pins": "google" },
+    { "name": "blogger.com", "include_subdomains": true, "pins": "google" },
+    { "name": "blogspot.com", "include_subdomains": true, "pins": "google" },
+    { "name": "doubleclick.net", "include_subdomains": true, "pins": "google" },
     { "name": "g.co", "include_subdomains": true, "pins": "google" },
-    { "name": "googletagmanager.com", "include_subdomains": true, "pins": "google" },
-    { "name": "googletagservices.com", "include_subdomains": true, "pins": "google" },
     { "name": "ggpht.com", "include_subdomains": true, "pins": "google" },
-    { "name": "blogspot.com", "include_subdomains": true, "pins": "google" },
     { "name": "google.ac", "include_subdomains": true, "pins": "google" },
     { "name": "google.ad", "include_subdomains": true, "pins": "google" },
+    { "name": "googleadservices.com", "include_subdomains": true, "pins": "google" },
     { "name": "google.ae", "include_subdomains": true, "pins": "google" },
     { "name": "google.af", "include_subdomains": true, "pins": "google" },
     { "name": "google.ag", "include_subdomains": true, "pins": "google" },
     { "name": "google.am", "include_subdomains": true, "pins": "google" },
+    { "name": "google-analytics.com", "include_subdomains": true, "pins": "google" },
+    { "name": "googleapis.com", "include_subdomains": true, "pins": "google" },
     { "name": "google.as", "include_subdomains": true, "pins": "google" },
     { "name": "google.at", "include_subdomains": true, "pins": "google" },
     { "name": "google.az", "include_subdomains": true, "pins": "google" },
@@ -367,22 +351,10 @@
     { "name": "google.co.ke", "include_subdomains": true, "pins": "google" },
     { "name": "google.co.kr", "include_subdomains": true, "pins": "google" },
     { "name": "google.co.ls", "include_subdomains": true, "pins": "google" },
-    { "name": "google.co.ma", "include_subdomains": true, "pins": "google" },
-    { "name": "google.co.mz", "include_subdomains": true, "pins": "google" },
-    { "name": "google.co.nz", "include_subdomains": true, "pins": "google" },
-    { "name": "google.co.th", "include_subdomains": true, "pins": "google" },
-    { "name": "google.co.tz", "include_subdomains": true, "pins": "google" },
-    { "name": "google.co.ug", "include_subdomains": true, "pins": "google" },
-    { "name": "google.co.uk", "include_subdomains": true, "pins": "google" },
-    { "name": "google.co.uz", "include_subdomains": true, "pins": "google" },
-    { "name": "google.co.ve", "include_subdomains": true, "pins": "google" },
-    { "name": "google.co.vi", "include_subdomains": true, "pins": "google" },
-    { "name": "google.co.za", "include_subdomains": true, "pins": "google" },
-    { "name": "google.co.zm", "include_subdomains": true, "pins": "google" },
-    { "name": "google.co.zw", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.af", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.ag", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.ai", "include_subdomains": true, "pins": "google" },
+    { "name": "google.co.ma", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.ar", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.au", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.bd", "include_subdomains": true, "pins": "google" },
@@ -407,6 +379,7 @@
     { "name": "google.com.gr", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.gt", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.hk", "include_subdomains": true, "pins": "google" },
+    { "name": "google.com", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.iq", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.jm", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.jo", "include_subdomains": true, "pins": "google" },
@@ -414,6 +387,7 @@
     { "name": "google.com.kw", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.lb", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.ly", "include_subdomains": true, "pins": "google" },
+    { "name": "googlecommerce.com", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.mt", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.mx", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.my", "include_subdomains": true, "pins": "google" },
@@ -447,6 +421,18 @@
     { "name": "google.com.vc", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.ve", "include_subdomains": true, "pins": "google" },
     { "name": "google.com.vn", "include_subdomains": true, "pins": "google" },
+    { "name": "google.co.mz", "include_subdomains": true, "pins": "google" },
+    { "name": "google.co.nz", "include_subdomains": true, "pins": "google" },
+    { "name": "google.co.th", "include_subdomains": true, "pins": "google" },
+    { "name": "google.co.tz", "include_subdomains": true, "pins": "google" },
+    { "name": "google.co.ug", "include_subdomains": true, "pins": "google" },
+    { "name": "google.co.uk", "include_subdomains": true, "pins": "google" },
+    { "name": "google.co.uz", "include_subdomains": true, "pins": "google" },
+    { "name": "google.co.ve", "include_subdomains": true, "pins": "google" },
+    { "name": "google.co.vi", "include_subdomains": true, "pins": "google" },
+    { "name": "google.co.za", "include_subdomains": true, "pins": "google" },
+    { "name": "google.co.zm", "include_subdomains": true, "pins": "google" },
+    { "name": "google.co.zw", "include_subdomains": true, "pins": "google" },
     { "name": "google.cv", "include_subdomains": true, "pins": "google" },
     { "name": "google.cz", "include_subdomains": true, "pins": "google" },
     { "name": "google.de", "include_subdomains": true, "pins": "google" },
@@ -466,6 +452,7 @@
     { "name": "google.gm", "include_subdomains": true, "pins": "google" },
     { "name": "google.gp", "include_subdomains": true, "pins": "google" },
     { "name": "google.gr", "include_subdomains": true, "pins": "google" },
+    { "name": "googlegroups.com", "include_subdomains": true, "pins": "google" },
     { "name": "google.gy", "include_subdomains": true, "pins": "google" },
     { "name": "google.hk", "include_subdomains": true, "pins": "google" },
     { "name": "google.hn", "include_subdomains": true, "pins": "google" },
@@ -477,11 +464,11 @@
     { "name": "google.info", "include_subdomains": true, "pins": "google" },
     { "name": "google.iq", "include_subdomains": true, "pins": "google" },
     { "name": "google.is", "include_subdomains": true, "pins": "google" },
-    { "name": "google.it", "include_subdomains": true, "pins": "google" },
     { "name": "google.it.ao", "include_subdomains": true, "pins": "google" },
+    { "name": "google.it", "include_subdomains": true, "pins": "google" },
     { "name": "google.je", "include_subdomains": true, "pins": "google" },
-    { "name": "google.jo", "include_subdomains": true, "pins": "google" },
     { "name": "google.jobs", "include_subdomains": true, "pins": "google" },
+    { "name": "google.jo", "include_subdomains": true, "pins": "google" },
     { "name": "google.jp", "include_subdomains": true, "pins": "google" },
     { "name": "google.kg", "include_subdomains": true, "pins": "google" },
     { "name": "google.ki", "include_subdomains": true, "pins": "google" },
@@ -528,6 +515,9 @@
     { "name": "google.sn", "include_subdomains": true, "pins": "google" },
     { "name": "google.so", "include_subdomains": true, "pins": "google" },
     { "name": "google.st", "include_subdomains": true, "pins": "google" },
+    { "name": "googlesyndication.com", "include_subdomains": true, "pins": "google" },
+    { "name": "googletagmanager.com", "include_subdomains": true, "pins": "google" },
+    { "name": "googletagservices.com", "include_subdomains": true, "pins": "google" },
     { "name": "google.td", "include_subdomains": true, "pins": "google" },
     { "name": "google.tg", "include_subdomains": true, "pins": "google" },
     { "name": "google.tk", "include_subdomains": true, "pins": "google" },
@@ -536,11 +526,19 @@
     { "name": "google.tn", "include_subdomains": true, "pins": "google" },
     { "name": "google.to", "include_subdomains": true, "pins": "google" },
     { "name": "google.tt", "include_subdomains": true, "pins": "google" },
+    { "name": "googleusercontent.com", "include_subdomains": true, "pins": "google" },
     { "name": "google.us", "include_subdomains": true, "pins": "google" },
     { "name": "google.uz", "include_subdomains": true, "pins": "google" },
     { "name": "google.vg", "include_subdomains": true, "pins": "google" },
     { "name": "google.vu", "include_subdomains": true, "pins": "google" },
     { "name": "google.ws", "include_subdomains": true, "pins": "google" },
+    { "name": "goo.gl", "include_subdomains": true, "pins": "google" },
+    { "name": "gstatic.com", "include_subdomains": true, "pins": "google" },
+    { "name": "urchin.com", "include_subdomains": true, "pins": "google" },
+    { "name": "youtube.com", "include_subdomains": true, "pins": "google" },
+    { "name": "youtu.be", "include_subdomains": true, "pins": "google" },
+    { "name": "youtube-nocookie.com", "include_subdomains": true, "pins": "google" },
+    { "name": "ytimg.com", "include_subdomains": true, "pins": "google" },
     // Exclude the learn.doubleclick.net subdomain because it uses a different
     // CA.
     { "name": "learn.doubleclick.net", "include_subdomains": true },