ff2 issuing http requests when https is forced

Bug reports and enhancement requests
Post Reply
al_9x
Master Bug Buster
Posts: 931
Joined: Thu Mar 19, 2009 4:52 pm

ff2 issuing http requests when https is forced

Post by al_9x »

Giorgio Maone wrote:I'm currently investigating if the response gets actually parsed by Firefox 2.0 or not: in the latter case, the feature would serve its purpose anyway, notwithstanding the double request
Forcing https is to prevent leaking over http, so how is it relevant if it gets parsed or not?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20 (.NET CLR 3.5.30729)
User avatar
Giorgio Maone
Site Admin
Posts: 9454
Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:

Re: Fx2 issuing http requests when https is forced

Post by Giorgio Maone »

Sorry, I was quite tired when I wrote that post.
Since I use HTTPS cookie promotion, I didn't consider the leakage argument, forgetting that secure cookie management is not enabled by default.

You're right obviously, this needs to be fixed for Fx 2.

Side note: Fx is the "official" abbreviation for Firefox, and this is a bug report: moderating accordingly ;)
Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:65.0) Gecko/20100101 Firefox/65.0
Nan M
Ambassador
Posts: 102
Joined: Thu Mar 19, 2009 12:44 pm

Re: Fx2 issuing http requests when https is forced

Post by Nan M »

Putting this here for a quick heads up only.

I'm getting all 443 alla da time now for forcing https on my couple of secure examples :-)
Mozilla/5.0 (Macintosh; U; PPC Mac OS X Mach-O; en-US; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20
User avatar
GµårÐïåñ
Lieutenant Colonel
Posts: 3365
Joined: Fri Mar 20, 2009 5:19 am
Location: PST - USA
Contact:

Re: ff2 issuing http requests when https is forced

Post by GµårÐïåñ »

Giorgio, not to bug (no pun intended) but did this bug get resolved? Any new word on it?
~.:[ Lï£ê ï§ å Lêmðñ åñÐ Ì Wåñ† M¥ Mðñê¥ ßå¢k ]:.~
________________ .: [ Major Mike's ] :. ________________
Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.0.8) Gecko/2009032609 Firefox/3.0.8 NoScript/1.9.1.7 FlashGot/1.1.8.5 FirePHP/0.2.4
Post Reply