Enhancement: Interface to add websites to enforce HTTPS
Posted: Wed Sep 25, 2013 7:24 am
I searched a solution to get Firefox always using HTTPS when possible, but did not find any plugin to do what I expect. But I found that the wonderful NoScript already has a part of what I search. You can already add pages to be forced to use HTTPS. No I propose two little extensions:
a) In the menu where I handle the script forbid/enable actions, there should be a new line: Each time when I'm on a HTTPS page and this is not yet in the positive list, there should be a action to allow adding it to that list. (should be very easy to do)
b) Little bit more complicated: Each time when I'm on a new HTTP page the browser should test if HTTPS is available and offer the option to switch for current session. If HTTPS is not available it should record that for some time, so no useless load is generated. This option probably should be possible to disable and not be activated by default. When switch to HTTPS works, the option (a) can make it permanent.
Both together are an easy interface to ensure more and more traffic uses HTTPS.
P.S. Is there a way to list all sites, which used HSTS to tell browser to switch to https? I found none, neither in NoScript nor in firefox itself.
a) In the menu where I handle the script forbid/enable actions, there should be a new line: Each time when I'm on a HTTPS page and this is not yet in the positive list, there should be a action to allow adding it to that list. (should be very easy to do)
b) Little bit more complicated: Each time when I'm on a new HTTP page the browser should test if HTTPS is available and offer the option to switch for current session. If HTTPS is not available it should record that for some time, so no useless load is generated. This option probably should be possible to disable and not be activated by default. When switch to HTTPS works, the option (a) can make it permanent.
Both together are an easy interface to ensure more and more traffic uses HTTPS.
P.S. Is there a way to list all sites, which used HSTS to tell browser to switch to https? I found none, neither in NoScript nor in firefox itself.