Add Multiple HHS Subdomains and 1 SBA Subdomain #333
Conversation
HHS requested we add a large handful of subdomains not showing up in their HTTPS/Trustymail reports. The original list has been compared to the list we are currently scanning, and those that weren't already being scanned have been added here.
|
Hi GSA team and @smarina04! I took a quick look through previous PRs, and it looks like CISA has been the only one requesting any changes to the https://github.com/GSA/data/blob/master/dotgov-websites/other-websites.csv list. Special thanks to @h-m-f-t for doing the merges for us while he was over at GSA and also continuing forward :) If you all are no longer updating the other-websites.csv, we'd be happy to maintain it over on the cisagov side! We could handle the current https://github.com/GSA/data/blob/master/dotgov-websites/other-websites.csv page similarly to the dotgov-domains repo that you all previously used to manage, where it now mentions the data has moved to a new location. Let us know if that is something that would work for you or if you prefer to be the maintainers of the list and whether it would be alright for myself to additionally be able to merge commits to this file. We might also want to discuss the https://github.com/GSA/data/blob/master/dotgov-websites/ocsp-crl.csv similarly. Let me know what you think! :) |
HHS sent us a long list of domains to add to their BOD 18-01 reports. We reviewed all the non-.gov base domains for association that it was either managed by or specifically on HHS' behalf, resulting in the smaller number of adds you see at cisagov/scan-target-data#48. These are the subdomains for those that were included in the list.
SBA has requested that we add disasterloanassistance.sba.gov so that it shows up in their Trustymail and HTTPS reports. I verified it is not currently being picked up in the sources gathered by double checking for its presence in their report.
climber-girl
changed the title
|
Looks like @h-m-f-t actually commented about CISA perhaps maintaining this list in issue #322: "The .gov top-level domain is moving to the Cybersecurity and Infrastructure Security Agency. As part of that move, CISA is interested in maintaining .gov data: particularly domains, but probably website info too. I'm filing this issue to raise awareness about moving this data and begin a discussion about impact." |
HHS requested we add a large handful of subdomains not showing up in their HTTPS/Trustymail reports. The original list has been compared to the list we are currently scanning, and those that weren't already being scanned have been added here.