Page 1 of 1

Force HTTPS doesn't work

Posted: Mon Oct 03, 2011 5:53 am
by Guest
Hello, I'm having trouble with NoScript 2.1.4. I can't remember when it was updated but I just noticed it several days ago.

I have a white list of
https://ajax.googleapis.com

and a force HTTPS for
ajax.googleapis.com
*.reddit.com

Expected behavior is:
I go to reddit.com, NoScript forces https://www.reddit.com and https://ajax.googleapis.com is also whitelisted. It still shows an Allow and Temporarily allow googleapis.com.

Now the behavior is:
I go to reddit.com, NoScript forces https://www.reddit.com and an Allow and Temporarily allow googleapis.com shows up but ajax.googleapis.com is no longer whitelisted.

Re: Force HTTPS doesn't work

Posted: Wed Oct 12, 2011 8:07 am
by Tom T.
This is strange. When I did what you said, I got this error message:
This Connection is Untrusted

You have asked Firefox to connect securely to http://www.reddit.com, but we can't confirm that your connection is secure.

Normally, when you try to connect securely, sites will present trusted identification to prove that you are going to the right place. However, this site's identity can't be verified.
What Should I Do?

If you usually connect to this site without problems, this error could mean that someone is trying to impersonate the site, and you shouldn't continue.
Technical Details

http://www.reddit.com uses an invalid security certificate. The certificate is only valid for the following names: a248.e.akamai.net , *.akamaihd.net , *.akamaihd-staging.net (Error code: ssl_error_bad_cert_domain)
and an Error Console of
Error: Warning: unrecognized command line flag -p

Source File: file:///C:/Program%20Files/Mozilla%20Firefox%203/components/nsBrowserContentHandler.js
Line: 742
I'll pass this on to Giorgio.