Page 1 of 1

HTTPS Scripts

Posted: Sat Oct 18, 2014 5:19 pm
by antipop
I don't understand exactly what an HTTPS script is as I thought HTTPS merely referred to an encryption protocol for connections. Consequently, I also don't fully understand the implication of a NoScript setting for Permissions with HTTPS on the Advanced tab, namely: Allow HTTPS scripts globally on HTTPS documents. Can someone point me to an example to illustrate a global HTTPS script?

Re: HTTPS Scripts

Posted: Sat Oct 18, 2014 8:35 pm
by barbaz
I think it means "scripts served over HTTPS will be Allowed if included by a document served over HTTPS, and everything else is subject to default-deny"
(of course, marking a site as Untrusted will Forbid its scripts regardless)

Re: HTTPS Scripts

Posted: Sun Oct 19, 2014 1:11 am
by antipop
> "...scripts served over HTTPS ..."

Yes, that would sound better and would make more sense to me, too. Thanks, barbaz.