# Can we have a list of all the Stack Exchange domains somewhere, for firewall purposes?

I work behind an really annoying firewall, and I just want the net admin to add all the SE websites to the whitelist. Right now I've lost access to Stack Overflow's authentication, but not Meta's... so I have to come here before I log in there.

It's driving me nuts. Basically I just want to add an exclusion rule for all SE domains; not only the website domains, but also the content domains such as gravatar.com, quantserve.com, the domain that holds static content, etc...

• I your bit about the content domains right when the site hiccupped for me and I couldn't get back into change my answer for a couple of minutes... Sorry! – squillman Mar 2 '11 at 16:35
• This question screws with my head. Asked March 2nd, 2011. Answered June 18th, 2010. – J. Steen Dec 11 '12 at 11:11
• @J.Steen the mysterious magic of merging... – AakashM Dec 11 '12 at 11:28
• The truth is I'm a time traveler. – Incognito Dec 11 '12 at 13:30
• @Peanut the subdomains tag should be used for actual sub domains of stackexchange.com, however domains like sstatic.net, gravatar.com etc are not, by any means, such sub domains. This tag does not fit here. – Shadow 10 Years Wizard May 22 '16 at 10:30

Stack Exchange sites can be found on these domains (or subdomains, e.g. *.stackexchange.com (including *.meta.stackexchange.com)):

The following domains (and in most cases their subdomains) are necessary to view Stack Exchange content and participate on Stack Exchange:

• ajax.googleapis.com — for some JavaScript (jQuery, …)
• i.stack.imgur.com — for most user images
• cdnjs.cloudflare.com — for MathJax (for sites with math formatting) (as of April, 2017) — for most SE sites
• *.sstatic.net — for static content (JavaScript, CSS, images, …)
• stacksnippets.net — for code snippets on SO

These ones are required for "normal" site usage on any site. In other words, if you just want to let your employees browse and post on Stack Overflow, but not waste time at Gaming Arqade, then you'll need to include Stackoverflow and all these dependencies.

• stackauth.com — for global login
• *.gravatar.com — to see user avatars of users using Gravatar
• graph.facebook.com — to see user avatars of users using their Facebook profile photo
• *.googleusercontent.com — to see user avatars of users using their Google profile photo

You can get a complete (and always up to date) list of Stack Exchange site URLs from the API. There are wrapper libraries in many languages for reading the API.

• I included grav and quant because they loaded up in the resources for the site. Mind you, so does google. – Incognito Mar 2 '11 at 16:34
• Neither one of them is in my NoScript whitelist and the sites all work fine, including seeing avatars. I have no idea what quantserve does, though. EDIT: and now I do know what quantserve does. Thanks, @Grace! – Pops Mar 2 '11 at 16:35
• You're welcome. Getting answers for people is what I'm here for. ♪ – Grace Note Mar 2 '11 at 16:41
• @Grace, really? I thought introducing people to the musical wonder of U+266A was what you were here for. – Pops Mar 2 '11 at 16:45
• wget -qO- http://stackauth.com/1.0/sites | gunzip | grep -oh \"htt.*\" | uniq > log.txt – Incognito Mar 2 '11 at 19:42
• Is i.stack.imgur.com non-specific enough to cover all likely cases of direct image uploading? (Joel's answer above just mentions imgur.) – mwfearnley May 28 '16 at 16:52

*.sstatic.net has all our static files. This is pretty much required to use the sites.

ajax.googleapis.com has JavaScript that helps the site function as expected. Pretty much required.

stackauth.com is needed for global login. Optional, but convenient if you're active on several Stack Exchange sites.

*.gravatar.com has the little icons next to people's names. Optional, but nice.

imgur.com hosts pictures that some users upload.

The other dependencies (*.quantserve.com, *.google-analytics.com) are used for our own analytics, letting us know how many visitors we get. Those are optional and the site works fine without them.

• How will this change if a CDN is implemented? – nhinkle May 22 '11 at 8:25
• @nhinkle: It won't -- we're using a subdomain of sstatic.net, so "*.sstatic.net" covers that. – balpha May 22 '11 at 9:00
• Good to know @balpha, thanks for the info. – nhinkle May 22 '11 at 9:17
• I know that Joel is badass and all, but how on earth did he answer a question that was asked in 2011, back in 2010 without breaking the laws of physics? – Octavian A. Damiean Jun 20 '13 at 10:20
• @OctavianDamiean - it was merged - meta.stackexchange.com/questions/54186/… – ChrisF Jul 27 '13 at 18:25