I work behind an really annoying firewall, and I just want the net admin to add all the SE websites to the whitelist. Right now I've lost access to Stack Overflow's authentication, but not Meta's... so I have to come here before I log in there.
It's driving me nuts. Basically I just want to add an exclusion rule for all SE domains; not only the website domains, but also the content domains such as gravatar.com, quantserve.com, the domain that holds static content, etc...
I'm a Community Wiki answer; please update me!
Stack Exchange sites can be found on these domains (or subdomains, e.g. *.stackexchange.com (including *.meta.stackexchange.com)):
| Domain | Site |
|---|---|
| askubuntu.com | Ask Ubuntu |
| mathoverflow.net | MathOverflow |
| serverfault.com | Server Fault |
| stackoverflow.com | Stack Overflow |
| stackexchange.com | Stack Exchange |
| stackapps.com | Stack Apps |
| superuser.com | Super User |
stackexchange.com includes first level domains, and second level domains: *.*.stackexchange.com
The following domains (and in most cases their subdomains) are necessary to view Stack Exchange content and participate on Stack Exchange:
| Domain | Purpose |
|---|---|
| ajax.googleapis.com | some JavaScript (jQuery, etc.) |
| i.sstatic.net | User Images |
| cdnjs.cloudflare.com | MathJax on supported sites |
| *.sstatic.net | static content (JavaScript, CSS, images, etc) |
| stacksnippets.net | code snippets on Stack Overflow |
These ones are required for "normal" site usage on any site. In other words, if you just want to let your employees browse and post on Stack Overflow, but not waste time at Arqade, then you'll need to include Stack Overflow and all these dependencies.
The following additional domains are required to enable additional features:
| Domain | Purpose |
|---|---|
| stackauth.com | global login (no longer needed due to Universal Login) |
| gravatar.com | to see user avatars of users using Gravatar |
| graph.facebook.com | to see user avatars of users using their Facebook profile photo |
| *.googleusercontent.com | to see user avatars of users using their Google profile photo |
| *.quantserve.com | Site Analytics |
| *.google-analytics.com | Site Analytics |
| *.scorecardresearch.com | Site Analytics |
| cdn.cookielaw.org | Cookies Consent dialog |
Related domains, not needed for viewing/using the regular Q/A sites:
| Domain | Purpose |
|---|---|
| blogoverflow.com | viewing archived Blog Overflow site blogs |
| stackmod.blog | community blog |
| stackoverflow.blog | company blog |
| stackoverflowbusiness.com | business site |
| stackoverflowsolutions.com | marketing purposes and swag email. Source |
| stackoverflowteams.com | Teams |
| stackoverflow.co | Data requests |
| stackoverflow.help | Teams help |
| tex-talk.net | TeX and LaTeX blog |
| thesffblog.com | science fiction and fantasy community blog |
| stackoverflow.email | centralized email services across the entire Stack Exchange network |
| stackoverflow.jobs | Stack Overflow Jobs jobsite powered by Indeed |
You can get a complete (and always up to date) list of Stack Exchange site URLs from the API. There are wrapper libraries in many languages for reading the API.
wget -qO- http://stackauth.com/1.0/sites | gunzip | grep -oh \"htt.*\" | uniq > log.txt
Commented
Mar 2, 2011 at 19:42
askubuntu.com, mathoverflow.net, blogoverflow.com, serverfault.com, stackoverflow.com, stackexchange.com, stackapps.com, stackmod.blog, stackoverflow.blog, stackoverflowbusiness.com, superuser.com, tex-talk.net, thesffblog.com
stackoverflow.email domain; see this MSO post for details.)
.co was not a typo for .com.
*.sstatic.net has all our static files. This is pretty much required to use the sites.
ajax.googleapis.com has JavaScript that helps the site function as expected. Pretty much required.
stackauth.com is needed for global login. Optional, but convenient if you're active on several Stack Exchange sites.
*.gravatar.com has the little icons next to people's names. Optional, but nice.
imgur.com hosts pictures that some users upload.
The other dependencies (*.quantserve.com, *.google-analytics.com) are used for our own analytics, letting us know how many visitors we get. Those are optional and the site works fine without them.
