@kspearrin Any particular reason why this store is super hardcoded instead of loaded from file (JSON?)

@Lillecarl Not really. I do have a backlog item to work on converting this to a static JSON file fetched from the apps that can be hosted on our CDN since that does make more since.

@kspearrin If you go that route, don't forget to do some sort of integrity check to limit the effectiveness of MITM attacks. Erroneous equivalent domains can be a security issue.

Once in a while it will be a good idea to revalidate all equivalent domains as well.

@setyb https should solve this, my thinking was honestly just adding a json to the build instead of hardcoding it.

If the json is distributed over HTTP I'd say it should be signed by a bitwarden cert though for that security indeed.

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}