4 ms·
One of Mozilla's recommended extensions is Smart HTTPS (which tries connecting to HTTPS, and if it fails reverts to HTTP). But I agree it would be nice for it t
by pzmarzly 7y ago
One of Mozilla's recommended extensions is Smart HTTPS (which tries connecting to HTTPS, and if it fails reverts to HTTP). But I agree it would be nice for it to be default.
[0] https://addons.mozilla.org/en-US/firefox/addon/smart-https-revived/ https://addons.mozilla.org/en-US/firefox/addon/smart-https-r...
- iforgotpassword 7y agoBut that doesn't help with mitm attacks at all. HSTS preloading is crude but probably the most pragmatic working solution.
- pzmarzly 7y agoIt helps with passive sniffing. But yeah, if attacker blocks HTTPS, then it's ineffective. I'm not dismissing HSTS, but rather suggesting to use both of these techniques (HSTS as site admin, Smart HTTPS as an user).