Page 1 of 1

request: please add "always https" to menu

Posted: Thu Oct 28, 2010 3:06 pm
by idefix
I'd like to use the always https feature. doing so would be much simpler if you could set this for domains with the menu, same as "allow ..." or "temporarily allow ...". for people who don't want it (and would complain about too much space used for this). it might be configurable in the options dialog.
it would also be cool to have an easy mouseclickable method to test https before setting it. but that's probably stretching it. you can always set it and if it doesn't work reset it. maybe even the other way around, try with https first and if it doesn't work switch to http. I don't know. it would just be that much better to always use https if possible with every domain that supports it. wouldn't it?

and thanks for the excellent add-on!

idefix

Re: request: please add "always https" to menu

Posted: Sun Oct 31, 2010 11:52 pm
by dhouwn
idefix wrote:maybe even the other way around, try with https first and if it doesn't work switch to http.
This would make you vulnerable to MITM attacks, an attacker could make NoScript think that HTTPS is not possible and therefore switch to HTTP.