Use HTTPS with search engines

Dax89 / WebPirate

A Tabbed, WebKit based Browser Web for SailfishOS

GNU General Public License v3.0

15 stars 7 forks source link

Use HTTPS with search engines #51

Closed Mikaela closed 9 years ago

Mikaela commented 9 years ago

At first I noticed that my queries to DDG where going over HTTP in the load bar, but then changed to HTTPS (I hope that is because WebPirate supports HSTS (does it?) and after finding this file, I also notices that Google uses Google Italy and thought that I could also change it.

For more about google.com vs encrypted.google.com, please see http://security.stackexchange.com/a/32374.

Dax89 commented 9 years ago

Merged, thanks! And, thanks for notice google.it domain :)

Mikaela commented 9 years ago

You're welcome.

It's still unclear to me is HSTS supported or not. It would make the issue of http://duckduckgo.com/ smaller until the next version is released and not require adding another search engine manually or even security fix release.

https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

Dax89 commented 9 years ago

About HSTS: I don't have access to QtWebKit's QNetworkAccessManager instance, because it stay in another process (QtWebProcess) and Qt developers doesn't provide an API for that.

Also, this is issue, doesn't allow the creation of a real adblocking system, cookie policy and proxies.

See here: 1) https://bugreports.qt.io/browse/QTBUG-18030 2) https://github.com/The-Compiler/qutebrowser/issues/665 (it seems that there is a workaround, but I'm not sure)