Merge branch 'potato-20-revive-hsts-preload' of github.com:testssl/testssl.sh into potato-20-revive-hsts-preload

Author: drwetter

doc/testssl.1

@@ -417,7 +417,8 @@ can try to apply evasion techniques by changing the variables USLEEP_SND
 and / or USLEEP_REC and maybe MAX_WAITSOCK.
 .PP
 \f[CR]\-\-phone\-out\f[R] Checking for revoked certificates via CRL and
-OCSP is not done per default.
+OCSP, as well as the HSTS preload list status via hstspreload.org, is
+not done per default.
 This switch instructs testssl.sh to query external \(en in a sense of
 the current run \(en URIs.
 By using this switch you acknowledge that the check might have privacy
@@ -603,6 +604,10 @@ by detection or by enforcing via \f[CR]\-\-assume\-http\f[R].
 It tests several HTTP headers like
 .IP \(bu 2
 HTTP Strict Transport Security (HSTS)
+.RS 2
+.IP \(bu 2
+HSTS preload list status (when \f[CR]\-\-phone\-out\f[R] supplied)
+.RE
 .IP \(bu 2
 HTTP Public Key Pinning (HPKP)
 .IP \(bu 2

doc/testssl.1.html

@@ -396,7 +396,8 @@ <h3 id="tuning-options">TUNING OPTIONS</h3>
         evasion techniques by changing the variables USLEEP_SND and / or
         USLEEP_REC and maybe MAX_WAITSOCK.</p>
         <p><code>--phone-out</code> Checking for revoked certificates
-        via CRL and OCSP is not done per default. This switch instructs
+        via CRL and OCSP, as well as the HSTS preload list status via
+        hstspreload.org, is not done per default. This switch instructs
         testssl.sh to query external – in a sense of the current run –
         URIs. By using this switch you acknowledge that the check might
         have privacy issues, a download of several megabytes (CRL file)
@@ -548,7 +549,11 @@ <h3 id="single-check-options">SINGLE CHECK OPTIONS</h3>
         <code>--assume-http</code>. It tests several HTTP headers
         like</p>
         <ul>
-        <li>HTTP Strict Transport Security (HSTS)</li>
+        <li>HTTP Strict Transport Security (HSTS)
+        <ul>
+        <li>HSTS preload list status (when <code>--phone-out</code>
+        supplied)</li>
+        </ul></li>
         <li>HTTP Public Key Pinning (HPKP)</li>
         <li>Server banner</li>
         <li>HTTP date+time</li>