Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add Multiple HHS Subdomains and 1 SBA Subdomain #333

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

climber-girl
Copy link
Contributor

HHS requested we add a large handful of subdomains not showing up in their HTTPS/Trustymail reports. The original list has been compared to the list we are currently scanning, and those that weren't already being scanned have been added here.

HHS requested we add a large handful of subdomains not showing up in their HTTPS/Trustymail reports.  The original list has been compared to the list we are currently scanning, and those that weren't already being scanned have been added here.
@climber-girl
Copy link
Contributor Author

climber-girl commented May 14, 2021

Hi GSA team and @smarina04! I took a quick look through previous PRs, and it looks like CISA has been the only one requesting any changes to the https://github.com/GSA/data/blob/master/dotgov-websites/other-websites.csv list. Special thanks to @h-m-f-t for doing the merges for us while he was over at GSA and also continuing forward :)

If you all are no longer updating the other-websites.csv, we'd be happy to maintain it over on the cisagov side! We could handle the current https://github.com/GSA/data/blob/master/dotgov-websites/other-websites.csv page similarly to the dotgov-domains repo that you all previously used to manage, where it now mentions the data has moved to a new location. Let us know if that is something that would work for you or if you prefer to be the maintainers of the list and whether it would be alright for myself to additionally be able to merge commits to this file.

We might also want to discuss the https://github.com/GSA/data/blob/master/dotgov-websites/ocsp-crl.csv similarly. Let me know what you think! :)

HHS sent us a long list of domains to add to their BOD 18-01 reports. We reviewed all the non-.gov base domains for association that it was either managed by or specifically on HHS' behalf, resulting in the smaller number of adds you see at cisagov/scan-target-data#48.  These are the subdomains for those that were included in the list.
SBA has requested that we add disasterloanassistance.sba.gov so that it shows up in their Trustymail and HTTPS reports.  I verified it is not currently being picked up in the sources gathered by double checking for its presence in their report.
@climber-girl climber-girl changed the title Add 2376 HHS Subdomains Add Multiple HHS Subdomains and 1 SBA Subdomain May 18, 2021
@climber-girl
Copy link
Contributor Author

Looks like @h-m-f-t actually commented about CISA perhaps maintaining this list in issue #322:

"The .gov top-level domain is moving to the Cybersecurity and Infrastructure Security Agency. As part of that move, CISA is interested in maintaining .gov data: particularly domains, but probably website info too. I'm filing this issue to raise awareness about moving this data and begin a discussion about impact."

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant