block sites with complet url!

[oui]

Hi

I have a good free email provider, I suppose the most used German email provider, but he does not offer https for free. I did read in an other forum how to make that this provider answer to some https request using noscript and it seems to really go, is easy, no discussion. but if you make the terrible error don't to use your self this way and hit on the surface of the page of the provider, that error opens the usual not secure communication... this happens if you write a wrong password, or the traffic is slow and the password doesn't be operable just in time etc.

the problem ist that it is about impossible to control such errors or to control if you did really use the secure url of the provider. for this reason, I would like to block the unsecure url so that the mistake become really impossible!

same thing with different sites like www.google.com against encrypted.goggle.com.

I will block www.google.com or google.com but permit encrypted.google.com or maps.google.com or translate.google.com of course
(it would be good to know how to register directly encrypted.google.com as searching engine to make sure that nothing else will invoque www.google.com. to use duckduckgo would stay possible using a simple bookmark!)

how to do that?

kind regards

[barbaz]

the problem ist that it is about impossible to control such errors or to control if you did really use the secure url of the provider. for this reason, I would like to block the unsecure url so that the mistake become really impossible!

NoScript Options > Advanced > ABE > USER
add to the very top

Code: Select all

Site ^http://thesites\.full\.dom\.ain[/:]
Deny

same thing with different sites like www.google.com against encrypted.goggle.com.

I will block www.google.com or google.com but permit encrypted.google.com or maps.google.com or translate.google.com of course

Same instructions, but use

Code: Select all

Site ^http://(?:www\.)?google\.com[/:]
Deny

For better performance, combine sites into one regexp

Code: Select all

Site ^http://(?:thesites\.full\.dom\.ain|(?:www\.)?google\.com)[/:]
Deny

(it would be good to know how to register directly encrypted.google.com as searching engine to make sure that nothing else will invoque www.google.com. to use duckduckgo would stay possible using a simple bookmark!)

remove google from search listing: Google icon > Manage Search Engines..., then delete google
then: completely exit SeaMonkey, go to SeaMonkey installdir/searchplugins, copy 'google.xml' to a 'searchplugins' directory in your profile folder, then replace www.google.com with encrypted.google.com everywhere in the file
restart seamonkey, the google search engine you see now points to encrypted.google.com
you may also want to alter about:config > keyword.URL

[oui]

best! thank you very much for this really detailed answer

[Thrawn]

Can't you simply force HTTPS on that URL?
Options-Advanced-HTTPS-Behavior-Force the following sites to use secure (HTTPS) connections