Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: New Firefox Extension Forces HTTPS Sessions on Popular Websites

20 Jun 2010   #1
JMH

Win 7 Ultimate 64-bit. SP1.
 
 
New Firefox Extension Forces HTTPS Sessions on Popular Websites

Quote:
The Electronic Frontier Foundation (EFF), one of the leading online privacy groups, together with the Tor Project, has developed a Firefox extension, which automatically forces HTTPS connections for several major sites that support it. Dubbed HTTPS Everywhere, the add-on allows users to add support for other websites as well by defining custom rulesets.

HTTPS (Hypertext Transfer Protocol Secure) connections are encrypted via the SSL/TLS, in order to prevent third parties from reading the data. Using this protocol is a must when browsing from public wireless networks or other environments, where Man-in-the-Middle (MitM) attacks are easy to mount.

HTTPS is most commonly used on websites that require secure transactions, such as e-commerce or online banking portals. However, in the past two years, the protocol has begun to see implementation for even the most common browsing tasks such as webmail sessions or even Web search.

In fact, "This Firefox extension was inspired by the launch of Google's encrypted search option," Peter Eckersley, a staff technologist for the Electronic Frontier Foundation, notes. "We wanted a way to ensure that every search our browsers sent was encrypted, including the search box and URL bar features. At the same time, we were also able to encrypt most or all of the browser's communications with other popular sites that support SSL, but don't provide it by default," Mike Perry, a core Tor Project developer, explains.

The extension is based on the STS (Strict Transport Security) implementation from NoScript, but, according to its creators, it is a lot more flexible. The STS specification defines a special response header field to be used by websites to tell browsers that all connections should be made over HTTPS.
More....
New Firefox Extension Forces HTTPS Sessions on Popular Websites - Developed by the EFF and the Tor Project - Softpedia


My System SpecsSystem Spec
.

20 Jun 2010   #2
Zoloft

Win7 Home Premium x64
 
 

very sweet thanks for the heads up, gonna give it a try!
My System SpecsSystem Spec
20 Jun 2010   #3
chinga69

xp/vista/win7/win8/10 tech preview
 
 

thats a shame not compatible with minefield 3.7a6pre.


thanks brad
My System SpecsSystem Spec
.


20 Jun 2010   #4
EchoX860

Windows 7 Home Premium x64
 
 

This disabled my Facebook chat. I had to disable Javascript and Re-Enable it for it to work again.
My System SpecsSystem Spec
20 Jun 2010   #5
ccatlett1984

 

Quote   Quote: Originally Posted by EchoX860 View Post
This disabled my Facebook chat. I had to disable Javascript and Re-Enable it for it to work again.
Thats because facebook chat doesn't use https, but the rest of the page can.
My System SpecsSystem Spec
20 Jun 2010   #6
ccatlett1984

 

Quote   Quote: Originally Posted by chinga69 View Post
thats a shame not compatible with minefield 3.7a6pre.


thanks brad
I agree completely, but you might be able to edit the xpi file so it installs. It might work, might not.
My System SpecsSystem Spec
20 Jun 2010   #7
front243

Windows 7 Home Premium x64
 
 

For Google Chrome there is a similar extension:

KB SSL Enforcer

You can whitelist/blacklist sites in case something goes wrong, but I never experienced problems myself.
My System SpecsSystem Spec
21 Jun 2010   #8
chinga69

xp/vista/win7/win8/10 tech preview
 
 

Quote   Quote: Originally Posted by ccatlett1984 View Post
Quote   Quote: Originally Posted by chinga69 View Post
thats a shame not compatible with minefield 3.7a6pre.


thanks brad
I agree completely, but you might be able to edit the xpi file so it installs. It might work, might not.

ill wait till they fix it

thanks brad
My System SpecsSystem Spec
22 Jun 2010   #9
Dave76

Microsoft Community Contributor Award Recipient

Windows 7 Ult x64 - SP1/ Windows 8 Pro x64
 
 

Quote   Quote: Originally Posted by front243 View Post
For Google Chrome there is a similar extension:

KB SSL Enforcer

You can whitelist/blacklist sites in case something goes wrong, but I never experienced problems myself.
Nice find, thanks
My System SpecsSystem Spec
25 Nov 2010   #10
Commodore Pet

Windows 7 Home Premium 64 bit SP1
 
 

I tried it today and so far so good. A new version was posted on their website and it is working fine on Firefox 4.0B8 64 bit. The only glitch was it kept trying to install over and over but once I shutdown Firefox and restarted it was installed and running fine.
My System SpecsSystem Spec
Reply

 New Firefox Extension Forces HTTPS Sessions on Popular Websites




Thread Tools





Similar help and support threads
Thread Forum
Firefox not connecting to https websites after update
Firefox updated and now I can't view ANY https sites, including Facebook and Google. I have emptied the chache and cookies, reset Firefox and re-installed. The error message comes up: "The connection was reset." I can view http websites fine.
Browsers & Mail
Cant connect to Secure/HTTPS websites
So ive been having this problem for about a week now. I cannot connect to google websites, facebook, email websites. Ive come to the conclusion that its only secure websites as websites like reddit and msn.com work. Ive tried alot of solutions that have worked for other people from around the...
Network & Sharing
Vulnerability in popular Joomla e-commerce extension puts online shops
Vulnerability in popular Joomla e-commerce extension puts online shops at risk Source A Guy
Security News
Popular Websites' Password Policies Leave Consumers Exposed
Source A Guy
Security News
Can't load HTTPS websites
I'm unable to open any HTTPS website. This morning my router died and I replaced it with a new one. I called my ISP to verify I have correct DNS servers. I can't think of anything that would restrict https in the router.. When I try to load https I get a connection timed out, as if the...
Network & Sharing
Firefox opening old sessions
I upgraded to Windows 7 with FF 3.5.2 installed. When I start up FF, occasionally old pages will load up, even if I close FF with no pages open and have cleared my old tab sessions. When I start FF it won't just open up the pages that I was last on but pages from hours before hand. Anyone else have...
Browsers & Mail

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 13:49.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App