Strict Transport Security NoScriptSTS.db problem

Ask for help about NoScript, no registration needed to post
heerschop
Posts: 3
Joined: Mon Aug 23, 2010 6:22 pm

Strict Transport Security NoScriptSTS.db problem

Post by heerschop »

I have a problem with the sts feature of noscript in firefox. I use firefox 3.6.8 and noscript 2.0.2.3
As I understand the sts feature lets you always connect to a site with the https (ssl) protocol.
After I have visited the site with the https protocol, the site is added to the noscriptsts.db.
The problem is that my noscriptsts.db gets purged after I close firefox and all the entries are gone.
When I close firefox the noscriptsts.db is not immediately purged. When I wait for about 10 minutes to open firefox again and then close it, the noscriptsts.db gets purged.
Is there a setting to prevent this from happening ?

thank you
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 (.NET CLR 3.5.30729)
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Strict Transport Security NoScriptSTS.db problem

Post by therube »

Strict Transport Security in NoScript

Appears that is server side, so not sites that you force https:.

Appears that at least informaction & bugzilla support server side.

Looks like as you visiting pages, the list changes interactively.

Mine persisted through a restart, though not sure if its contents remained unchanged?
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.11) Gecko/20100701 SeaMonkey/2.0.6
heerschop
Posts: 3
Joined: Mon Aug 23, 2010 6:22 pm

Re: Strict Transport Security NoScriptSTS.db problem

Post by heerschop »

My understanding of the way STS works has been is wrong. I thought the website has to be in the Noscriptsts.db in order to automatically establish a secure connection.
I tried paypal.com and firefox made a secure connection even when there was no entry of paypal in the noscriptsts.db file.
Conclusion there is no problem and sts is working without a hitch.

Thank you for your reply
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 (.NET CLR 3.5.30729)
User avatar
therube
Ambassador
Posts: 7924
Joined: Thu Mar 19, 2009 4:17 pm
Location: Maryland USA

Re: Strict Transport Security NoScriptSTS.db problem

Post by therube »

"HTTP Strict Transport Security has landed!

It was a year ago now that I first blogged about ForceTLS, and it's matured quite a bit since. I revised ForceTLS to be more robust, and began actually implementing it as HTTP-Strict-Transport-Security in Firefox. I'm excited to say that my patch has been reviewed and landed in mozilla-central." ...
http://blog.sidstamm.com/2010/08/http-s ... y-has.html
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.19) Gecko/20110420 SeaMonkey/2.0.14 Pinball NoScript FlashGot AdblockPlus
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.1.11) Gecko/20100701 SeaMonkey/2.0.6
Post Reply