Page 1 of 1

block sites with complet url!

Posted: Sat Jan 10, 2015 2:01 pm
by oui
Hi

I have a good free email provider, I suppose the most used German email provider, but he does not offer https for free. I did read in an other forum how to make that this provider answer to some https request using noscript and it seems to really go, is easy, no discussion. but if you make the terrible error don't to use your self this way and hit on the surface of the page of the provider, that error opens the usual not secure communication... this happens if you write a wrong password, or the traffic is slow and the password doesn't be operable just in time etc.

the problem ist that it is about impossible to control such errors or to control if you did really use the secure url of the provider. for this reason, I would like to block the unsecure url :mrgreen: so that the mistake become really impossible!

same thing with different sites like www.google.com against encrypted.goggle.com.

I will block www.google.com or google.com but permit encrypted.google.com or maps.google.com or translate.google.com of course
(it would be good to know how to register directly encrypted.google.com as searching engine to make sure that nothing else will invoque www.google.com. to use duckduckgo would stay possible using a simple bookmark!)

how to do that?

kind regards

Re: block sites with complet url!

Posted: Sat Jan 10, 2015 3:26 pm
by barbaz
oui wrote:the problem ist that it is about impossible to control such errors or to control if you did really use the secure url of the provider. for this reason, I would like to block the unsecure url :mrgreen: so that the mistake become really impossible!
NoScript Options > Advanced > ABE > USER
add to the very top

Code: Select all

Site ^http://thesites\.full\.dom\.ain[/:]
Deny
oui wrote:same thing with different sites like www.google.com against encrypted.goggle.com.

I will block www.google.com or google.com but permit encrypted.google.com or maps.google.com or translate.google.com of course
Same instructions, but use

Code: Select all

Site ^http://(?:www\.)?google\.com[/:]
Deny
For better performance, combine sites into one regexp

Code: Select all

Site ^http://(?:thesites\.full\.dom\.ain|(?:www\.)?google\.com)[/:]
Deny
oui wrote:(it would be good to know how to register directly encrypted.google.com as searching engine to make sure that nothing else will invoque www.google.com. to use duckduckgo would stay possible using a simple bookmark!)
remove google from search listing: Google icon > Manage Search Engines..., then delete google
then: completely exit SeaMonkey, go to SeaMonkey installdir/searchplugins, copy 'google.xml' to a 'searchplugins' directory in your profile folder, then replace www.google.com with encrypted.google.com everywhere in the file
restart seamonkey, the google search engine you see now points to encrypted.google.com
you may also want to alter about:config > keyword.URL

Re: block sites with complet url!

Posted: Sat Jan 10, 2015 11:34 pm
by oui
best! thank you very much for this really detailed answer

Re: block sites with complet url!

Posted: Mon Jan 12, 2015 4:12 am
by Thrawn
Can't you simply force HTTPS on that URL?
Options-Advanced-HTTPS-Behavior-Force the following sites to use secure (HTTPS) connections