Balrog/Client Domains
This page documents all of domains that Balrog serves, when various applications switched to them, and their SSL pinning requirements.
| Domain | Application | Versions | Issuer Pinned To | HPKP(inning) | Links |
|---|---|---|---|---|---|
| aus5.mozilla.org | Firefox | 42.0 and up | Nothing | None | bug 1116409 |
| Fennec | Nothing | None | bug 1116409 | ||
| GMP | "CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US"
"CN=thawte SSL CA - G2,O=thawte, Inc.,C=US" |
None | bug 1116409 | ||
| Thunderbird | "CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US"
"CN=thawte SSL CA - G2,O=thawte, Inc.,C=US" |
None | bug 1116409 | ||
| B2G | ??? | Nothing | None | bug 1116409 | |
| SystemAddons | 44.0 and up | Nothing | None | bug 1213348 | |
| aus4.mozilla.org | Firefox | 36.0 - 41.0 | "CN=DigiCert Secure Server CA,O=DigiCert Inc,C=US"
"CN=Thawte SSL CA,O=\"Thawte, Inc.\",C=US" |
None | bug 885477 |
| Thunderbird | "CN=DigiCert Secure Server CA,O=DigiCert Inc,C=US"
"CN=Thawte SSL CA,O=\"Thawte, Inc.\",C=US" |
None | bug 922264 | ||
| Fennec | 27.0 - 42.0 | "CN=DigiCert Secure Server CA,O=DigiCert Inc,C=US"
"CN=Thawte SSL CA,O=\"Thawte, Inc.\",C=US" |
None | bug 885477 | |
| B2G | ??? | Nothing | None | bug 918068 | |
| GMP | 37.0 - 41.0 | "CN=DigiCert Secure Server CA,O=DigiCert Inc,C=US"
"CN=Thawte SSL CA,O=\"Thawte, Inc.\",C=US" |
None | ||
| aus3.mozilla.org | Firefox | 4.0 - 35.0 | "OU=Equifax Secure Certificate Authority,O=Equifax,C=US"
"CN=Thawte SSL CA,O=\"Thawte, Inc.\",C=US" |
None | bug 586213 |
| Thunderbird | 14.0 - 35.0 | "OU=Equifax Secure Certificate Authority,O=Equifax,C=US"
"CN=Thawte SSL CA,O=\"Thawte, Inc.\",C=US" |
None | bug 751679 | |
| aus2.mozilla.org | Firefox | 2.0 - 3.0 | Nothing | None | bug 302721 |
| Fennec | 26.0 and earlier | Nothing | None | bug 302721 |
NB: Beginning with 24.0, Thunderbird started shipping release channel builds of ESR repos. This means that they have not shipped any release builds from Gecko versions other than 24.0, 31.0, 38.0, 45.0, 52.0, etc. The version numbers in the table still apply for Betas shipped from the major versions listed.