|20 Jun 2010||#1|
| || |
New Firefox Extension Forces HTTPS Sessions on Popular Websites
The Electronic Frontier Foundation (EFF), one of the leading online privacy groups, together with the Tor Project, has developed a Firefox extension, which automatically forces HTTPS connections for several major sites that support it. Dubbed HTTPS Everywhere, the add-on allows users to add support for other websites as well by defining custom rulesets.
HTTPS (Hypertext Transfer Protocol Secure) connections are encrypted via the SSL/TLS, in order to prevent third parties from reading the data. Using this protocol is a must when browsing from public wireless networks or other environments, where Man-in-the-Middle (MitM) attacks are easy to mount.
HTTPS is most commonly used on websites that require secure transactions, such as e-commerce or online banking portals. However, in the past two years, the protocol has begun to see implementation for even the most common browsing tasks such as webmail sessions or even Web search.
In fact, "This Firefox extension was inspired by the launch of Google's encrypted search option," Peter Eckersley, a staff technologist for the Electronic Frontier Foundation, notes. "We wanted a way to ensure that every search our browsers sent was encrypted, including the search box and URL bar features. At the same time, we were also able to encrypt most or all of the browser's communications with other popular sites that support SSL, but don't provide it by default," Mike Perry, a core Tor Project developer, explains.
The extension is based on the STS (Strict Transport Security) implementation from NoScript, but, according to its creators, it is a lot more flexible. The STS specification defines a special response header field to be used by websites to tell browsers that all connections should be made over HTTPS.
New Firefox Extension Forces HTTPS Sessions on Popular Websites - Developed by the EFF and the Tor Project - Softpedia
|My System Specs|
|21 Jun 2010||#8|
| || |
|My System Specs|
|Similar help and support threads for2: New Firefox Extension Forces HTTPS Sessions on Popular Websites|
|How to automatically save Firefox sessions in regular intervals||Software|
|Google Launches Chrome Extension for Reporting Spam Websites||Browsers & Mail|
|Patchy Phisher Forces Firefox to Forego Forgetting Passwords||Security News|
|Chrome Outpaces Firefox and Opera, Forces IE Under 60%||Browsers & Mail|
|Firefox opening old sessions||Browsers & Mail|
|Bing is not popular enough for Firefox.||Browsers & Mail|
|Firefox 3.5 Bests IE8, IE7, IE6 as Most Popular Browser||Browsers & Mail|