4 ms·

The Firefox addon HTTPS Finder just alerted me to the fact that there was an HTTPS version of the site at https://news.ycombinator.com/ https://news.ycombinator

The Firefox addon HTTPS Finder just alerted me to the fact that there was an HTTPS version of the site at https://news.ycombinator.com/ https://news.ycombinator.com/ - I tried it out, and it worked. Nice work. EDIT: Session cookie needs to be set as "secure" and Strict-Transport-Security should be implemented in order to protect against certain attacks. End users can just add this HTTPS-Everywhere ruleset: https://raw.github.com/mikecardwell/https-everywhere/73241d145b7bb8f62d9be2f713baafb622501fce/src/chrome/content/rules/YCombinator.xml https://raw.github.com/mikecardwell/https-everywhere/73241d1...

profquail 15y ago
Thanks for the HTTPS-Everywhere ruleset! I've been using HTTPS-Everywhere for a reasonably long time now (a couple of years?) but this is actually the first time I've added a rule...so if anyone else falls into that boat: all you need to do is save the YCombinator.xml file (linked above, from Mike's GitHub) into the HTTPSEverywhereUserRules folder in your Firefox profile folder, then restart Firefox. Hopefully that'll save someone else from having to look it up ;)
- NickBomb 15y ago
  Thanks for saving me a minute or two. :)
EGreg 15y ago
Can you elaborate please? What is this "HTTPS everywhere" and why do we need it?
- mtogo 15y ago
  A really fantastic firefox addon that forces HTTPS on certain sites. https://eff.org/https-everywhere/ https://eff.org/https-everywhere/
- walrus 15y ago
  > and why do we need it? If you're on an unsecured wireless network (e.g. at a library) and you don't want someone to see your HN password when you log in.
- tobylane 15y ago
  Here's a silent Chrome version https://chrome.google.com/webstore/detail/flcpelgcagfhfoegekianiofphddckof https://chrome.google.com/webstore/detail/flcpelgcagfhfoegek...
  - mtogo 15y ago
    Watch out, this extension does not do what HTTPS-Everywhere does! With KB SSL Enforcer, your browser still hits the HTTP version before being redirected to the HTTPS version of the site.
happyhacker 15y ago
NERD ALERT!!!!

profquail 15y ago

Thanks for the HTTPS-Everywhere ruleset! I've been using HTTPS-Everywhere for a reasonably long time now (a couple of years?) but this is actually the first time I've added a rule...so if anyone else falls into that boat: all you need to do is save the YCombinator.xml file (linked above, from Mike's GitHub) into the HTTPSEverywhereUserRules folder in your Firefox profile folder, then restart Firefox. Hopefully that'll save someone else from having to look it up ;)

NickBomb 15y ago
Thanks for saving me a minute or two. :)

EGreg 15y ago

Can you elaborate please? What is this "HTTPS everywhere" and why do we need it?

mtogo 15y ago
A really fantastic firefox addon that forces HTTPS on certain sites. https://eff.org/https-everywhere/ https://eff.org/https-everywhere/
walrus 15y ago
> and why do we need it? If you're on an unsecured wireless network (e.g. at a library) and you don't want someone to see your HN password when you log in.
tobylane 15y ago
Here's a silent Chrome version https://chrome.google.com/webstore/detail/flcpelgcagfhfoegekianiofphddckof https://chrome.google.com/webstore/detail/flcpelgcagfhfoegek...
- mtogo 15y ago
  Watch out, this extension does not do what HTTPS-Everywhere does! With KB SSL Enforcer, your browser still hits the HTTP version before being redirected to the HTTPS version of the site.

happyhacker 15y ago

NERD ALERT!!!!