Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.



Windows 7: New Firefox Extension Forces HTTPS Sessions on Popular Websites

20 Jun 2010   #1
JMH

Win 7 Ultimate 64-bit. SP1.
 
 
New Firefox Extension Forces HTTPS Sessions on Popular Websites

Quote:
The Electronic Frontier Foundation (EFF), one of the leading online privacy groups, together with the Tor Project, has developed a Firefox extension, which automatically forces HTTPS connections for several major sites that support it. Dubbed HTTPS Everywhere, the add-on allows users to add support for other websites as well by defining custom rulesets.

HTTPS (Hypertext Transfer Protocol Secure) connections are encrypted via the SSL/TLS, in order to prevent third parties from reading the data. Using this protocol is a must when browsing from public wireless networks or other environments, where Man-in-the-Middle (MitM) attacks are easy to mount.

HTTPS is most commonly used on websites that require secure transactions, such as e-commerce or online banking portals. However, in the past two years, the protocol has begun to see implementation for even the most common browsing tasks such as webmail sessions or even Web search.

In fact, "This Firefox extension was inspired by the launch of Google's encrypted search option," Peter Eckersley, a staff technologist for the Electronic Frontier Foundation, notes. "We wanted a way to ensure that every search our browsers sent was encrypted, including the search box and URL bar features. At the same time, we were also able to encrypt most or all of the browser's communications with other popular sites that support SSL, but don't provide it by default," Mike Perry, a core Tor Project developer, explains.

The extension is based on the STS (Strict Transport Security) implementation from NoScript, but, according to its creators, it is a lot more flexible. The STS specification defines a special response header field to be used by websites to tell browsers that all connections should be made over HTTPS.
More....
New Firefox Extension Forces HTTPS Sessions on Popular Websites - Developed by the EFF and the Tor Project - Softpedia

My System SpecsSystem Spec
.

20 Jun 2010   #2

Win7 Home Premium x64
 
 

very sweet thanks for the heads up, gonna give it a try!
My System SpecsSystem Spec
20 Jun 2010   #3

win 7 64 RTM
 
 

thats a shame not compatible with minefield 3.7a6pre.


thanks brad
My System SpecsSystem Spec
.


20 Jun 2010   #4

Windows 7 Home Premium x64
 
 

This disabled my Facebook chat. I had to disable Javascript and Re-Enable it for it to work again.
My System SpecsSystem Spec
20 Jun 2010   #5

 

Quote   Quote: Originally Posted by EchoX860 View Post
This disabled my Facebook chat. I had to disable Javascript and Re-Enable it for it to work again.
Thats because facebook chat doesn't use https, but the rest of the page can.
My System SpecsSystem Spec
20 Jun 2010   #6

 

Quote   Quote: Originally Posted by chinga69 View Post
thats a shame not compatible with minefield 3.7a6pre.


thanks brad
I agree completely, but you might be able to edit the xpi file so it installs. It might work, might not.
My System SpecsSystem Spec
20 Jun 2010   #7

Windows 7 Home Premium x64
 
 

For Google Chrome there is a similar extension:

KB SSL Enforcer

You can whitelist/blacklist sites in case something goes wrong, but I never experienced problems myself.
My System SpecsSystem Spec
21 Jun 2010   #8

win 7 64 RTM
 
 

Quote   Quote: Originally Posted by ccatlett1984 View Post
Quote   Quote: Originally Posted by chinga69 View Post
thats a shame not compatible with minefield 3.7a6pre.


thanks brad
I agree completely, but you might be able to edit the xpi file so it installs. It might work, might not.

ill wait till they fix it

thanks brad
My System SpecsSystem Spec
22 Jun 2010   #9

Microsoft Community Contributor Award Recipient

Windows 7 Ult x64 - SP1/ Windows 8 Pro x64
 
 

Quote   Quote: Originally Posted by front243 View Post
For Google Chrome there is a similar extension:

KB SSL Enforcer

You can whitelist/blacklist sites in case something goes wrong, but I never experienced problems myself.
Nice find, thanks
My System SpecsSystem Spec
25 Nov 2010   #10

Windows 7 Home Premium 64 bit SP1
 
 

I tried it today and so far so good. A new version was posted on their website and it is working fine on Firefox 4.0B8 64 bit. The only glitch was it kept trying to install over and over but once I shutdown Firefox and restarted it was installed and running fine.
My System SpecsSystem Spec
Reply

 New Firefox Extension Forces HTTPS Sessions on Popular Websites





Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 09:34 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33