Page 1 of 1

Enhancement: Interface to add websites to enforce HTTPS

Posted: Wed Sep 25, 2013 7:24 am
by stoecker
I searched a solution to get Firefox always using HTTPS when possible, but did not find any plugin to do what I expect. But I found that the wonderful NoScript already has a part of what I search. You can already add pages to be forced to use HTTPS. No I propose two little extensions:

a) In the menu where I handle the script forbid/enable actions, there should be a new line: Each time when I'm on a HTTPS page and this is not yet in the positive list, there should be a action to allow adding it to that list. (should be very easy to do)

b) Little bit more complicated: Each time when I'm on a new HTTP page the browser should test if HTTPS is available and offer the option to switch for current session. If HTTPS is not available it should record that for some time, so no useless load is generated. This option probably should be possible to disable and not be activated by default. When switch to HTTPS works, the option (a) can make it permanent.

Both together are an easy interface to ensure more and more traffic uses HTTPS.

P.S. Is there a way to list all sites, which used HSTS to tell browser to switch to https? I found none, neither in NoScript nor in firefox itself.

Re: Enhancement: Interface to add websites to enforce HTTPS

Posted: Wed Sep 25, 2013 10:59 am
by Thrawn
You may be interested in the HTTPS Finder addon.

Re: Enhancement: Interface to add websites to enforce HTTPS

Posted: Wed Sep 25, 2013 1:07 pm
by stoecker
Thrawn wrote:You may be interested in the HTTPS Finder addon.
This add-on has been removed by its author.

Re: Enhancement: Interface to add websites to enforce HTTPS

Posted: Wed Sep 25, 2013 9:25 pm
by Thrawn
It has moved to Github. And I see that the latest source code now includes NoScript integration :). (Thanks Giorgio for following that up).

Re: Enhancement: Interface to add websites to enforce HTTPS

Posted: Thu Sep 26, 2013 6:58 am
by stoecker
Thrawn wrote:It has moved to Github. And I see that the latest source code now includes NoScript integration :). (Thanks Giorgio for following that up).
I've seen the source repository, but the last xpi-file for download is broken and the addon not available for firefox installation (see my note). Does not look promising.

Re: Enhancement: Interface to add websites to enforce HTTPS

Posted: Thu Sep 26, 2013 11:56 am
by Thrawn
If you're on Linux, it's pretty simple:

Code: Select all

git clone https://github.com/kevinjacobs/HTTPS-Finder.git
sed -ie 's/{ appname }/httpsfinder/g' HTTPS-Finder/src/chrome.manifest
cd HTTPS-Finder/src/
zip -r ../dist/https-finder-SNAPSHOT.xpi *
You can then open the XPI file in Firefox to install it.
NB There shouldn't be space around the curly braces, but it was necessary to stop the forum software from parsing them.

If you don't have Git, you can install it with

Code: Select all

sudo apt-get install git
or you can just download a ZIP file from the Github page.

Re: Enhancement: Interface to add websites to enforce HTTPS

Posted: Fri Sep 27, 2013 7:11 pm
by dhouwn
Packets of stable releases can be found at https://code.google.com/p/https-finder/downloads/list.