HTTPS in Advanced Options

[jw72253]

Hello. Now that I have installed NoScript, given its extensive capabilities, I would like to see whether I can eliminate or, at least to some extent, curtail my reliance on any of the other extenstions I have been using. Most of them are centered on my concerns for security and efficiency, but if NoScript can handle any of their functionality, I would prefer to utilize it and do without the others. This might help recover some memory and give me more control as well. I want to start with two addons I have been using in connection with HTTPS. Based on my understanding of some information I read at "http://hackademix.net/category/ssl/" and at the websites for these addons themselves, I think I may be able to avoid some redundancy.

These two are called "HTTPS Finder" (https://addons.mozilla.org/en-US/firefo ... ps-finder/) and "HTTPS Everywhere" (https://www.eff.org/https-everywhere). The purpose of HTTPS Finder is to send a request to each HTTP site visited and, if it finds that the site has a valid security certificate, it redirects the current connection to HTTPS. It also alerts me of this redirection. It also has a secondary but important purpose when used in conjunction with the second extension. Specifically, in those instances when it makes a valid HTTPS connection, it creates a rule for this site and sends the rule to the HTTPS Everywhere extension for use in its purpose.

HTTPS Everywhere allows for the proactive creation of rules for redirection, such that whenever an HTTP rules has been stored in its configuration file, it will always redirect to that site without having to go to the unsecured HTTP site first. Apparently, the makers of HTTPS Everywhere get advisement from users who visit different sites and they then make periodic updates to send out so that everyone with the extension gets the updates. Additionally, the rules that get sent to it from the first addon, HTTPS Finder, affect its behavior in a similar way by redirecting it automatically.

So, my question is this, can NoScript be made to do either of these so that I can discontinue their use? Let me know if you need additional information. Thank you.

[Tom T.]

HTTPS FAQ. Configure every site either in advance, or as you come upon it and discover that it supports HTTPS.

All of your banking and other "sensitive" sites should be in this list, in both sub-tabs (Behavior and Cookies).

NS does *not* proactively search HTTP sites to see whether they will accept HTTPS connections, so either keep the Finder add-on, with its frequent updates and lists of sites you'll never visit, or just add them through the above NS GUI.

Note that not all sites are "happy" about this, and some errors may occur on sites that aren't ordinarily considered "sensitive".