request: please add "always https" to menu

Ask for help about NoScript, no registration needed to post
idefix

request: please add "always https" to menu

Post by idefix »

I'd like to use the always https feature. doing so would be much simpler if you could set this for domains with the menu, same as "allow ..." or "temporarily allow ...". for people who don't want it (and would complain about too much space used for this). it might be configurable in the options dialog.
it would also be cool to have an easy mouseclickable method to test https before setting it. but that's probably stretching it. you can always set it and if it doesn't work reset it. maybe even the other way around, try with https first and if it doesn't work switch to http. I don't know. it would just be that much better to always use https if possible with every domain that supports it. wouldn't it?

and thanks for the excellent add-on!

idefix
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.10) Gecko/20100914 Firefox/3.6.10 ZarafaCheck/1.1.1.20080624.110
dhouwn
Bug Buster
Posts: 968
Joined: Thu Mar 19, 2009 12:51 pm

Re: request: please add "always https" to menu

Post by dhouwn »

idefix wrote:maybe even the other way around, try with https first and if it doesn't work switch to http.
This would make you vulnerable to MITM attacks, an attacker could make NoScript think that HTTPS is not possible and therefore switch to HTTP.
Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.2.12) Gecko/20101027 Ubuntu/10.10 (maverick) Firefox/3.6.12
Post Reply