Enhancement: Interface to add websites to enforce HTTPS

Bug reports and enhancement requests
Post Reply
stoecker
Posts: 3
Joined: Wed Sep 25, 2013 7:11 am

Enhancement: Interface to add websites to enforce HTTPS

Post by stoecker »

I searched a solution to get Firefox always using HTTPS when possible, but did not find any plugin to do what I expect. But I found that the wonderful NoScript already has a part of what I search. You can already add pages to be forced to use HTTPS. No I propose two little extensions:

a) In the menu where I handle the script forbid/enable actions, there should be a new line: Each time when I'm on a HTTPS page and this is not yet in the positive list, there should be a action to allow adding it to that list. (should be very easy to do)

b) Little bit more complicated: Each time when I'm on a new HTTP page the browser should test if HTTPS is available and offer the option to switch for current session. If HTTPS is not available it should record that for some time, so no useless load is generated. This option probably should be possible to disable and not be activated by default. When switch to HTTPS works, the option (a) can make it permanent.

Both together are an easy interface to ensure more and more traffic uses HTTPS.

P.S. Is there a way to list all sites, which used HSTS to tell browser to switch to https? I found none, neither in NoScript nor in firefox itself.
Mozilla/5.0 (X11; Linux x86_64; rv:23.0) Gecko/20100101 Firefox/23.0
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: Enhancement: Interface to add websites to enforce HTTPS

Post by Thrawn »

You may be interested in the HTTPS Finder addon.
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:24.0) Gecko/20100101 Firefox/24.0
stoecker
Posts: 3
Joined: Wed Sep 25, 2013 7:11 am

Re: Enhancement: Interface to add websites to enforce HTTPS

Post by stoecker »

Thrawn wrote:You may be interested in the HTTPS Finder addon.
This add-on has been removed by its author.
Mozilla/5.0 (X11; Linux x86_64; rv:23.0) Gecko/20100101 Firefox/23.0
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: Enhancement: Interface to add websites to enforce HTTPS

Post by Thrawn »

It has moved to Github. And I see that the latest source code now includes NoScript integration :). (Thanks Giorgio for following that up).
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:24.0) Gecko/20100101 Firefox/24.0
stoecker
Posts: 3
Joined: Wed Sep 25, 2013 7:11 am

Re: Enhancement: Interface to add websites to enforce HTTPS

Post by stoecker »

Thrawn wrote:It has moved to Github. And I see that the latest source code now includes NoScript integration :). (Thanks Giorgio for following that up).
I've seen the source repository, but the last xpi-file for download is broken and the addon not available for firefox installation (see my note). Does not look promising.
Mozilla/5.0 (X11; Linux x86_64; rv:23.0) Gecko/20100101 Firefox/23.0
User avatar
Thrawn
Master Bug Buster
Posts: 3106
Joined: Mon Jan 16, 2012 3:46 am
Location: Australia
Contact:

Re: Enhancement: Interface to add websites to enforce HTTPS

Post by Thrawn »

If you're on Linux, it's pretty simple:

Code: Select all

git clone https://github.com/kevinjacobs/HTTPS-Finder.git
sed -ie 's/{ appname }/httpsfinder/g' HTTPS-Finder/src/chrome.manifest
cd HTTPS-Finder/src/
zip -r ../dist/https-finder-SNAPSHOT.xpi *
You can then open the XPI file in Firefox to install it.
NB There shouldn't be space around the curly braces, but it was necessary to stop the forum software from parsing them.

If you don't have Git, you can install it with

Code: Select all

sudo apt-get install git
or you can just download a ZIP file from the Github page.
======
Thrawn
------------
Religion is not the opium of the masses. Daily life is the opium of the masses.

True religion, which dares to acknowledge death and challenge the way we live, is an attempt to wake up.
Mozilla/5.0 (X11; Ubuntu; Linux i686; rv:24.0) Gecko/20100101 Firefox/24.0
dhouwn
Bug Buster
Posts: 968
Joined: Thu Mar 19, 2009 12:51 pm

Re: Enhancement: Interface to add websites to enforce HTTPS

Post by dhouwn »

Packets of stable releases can be found at https://code.google.com/p/https-finder/downloads/list.
Mozilla/5.0 (Windows NT 6.2; WOW64; rv:25.0) Gecko/20100101 Firefox/25.0
Post Reply