search

EFForg / https-everywhere

A browser extension that encrypts your communications with many websites that offer HTTPS but still allow unencrypted connections.
https://eff.org/https-everywhere
Other
3.37k stars 1.09k forks source link

Add a rule to ignore .i2p sites #20170

Closed AstralStorm closed 1 year ago

AstralStorm commented 2 years ago

It seems there is an interaction between HTTPS Everywhere and I2P when used to access internal eepsites, with .i2p domain. This issue only happens in EASE mode.

Normally, eepsites do not use TLS because they are already on a network that's encrypted and authenticated in another, somewhat more manual, way. It would be nice to have a rule to skip .i2p domain altogether, even in EASE mode, and especially for .b32.i2p and .b64.i2p addresses.

Vftdan commented 2 years ago

It would be nice to be able to configure such tlds, e. g. add *.i2p to the list of disabled sites. (It currently fails with This host could not be added because it was not formatted correctly. Please check it and try again.)

mmgen commented 1 year ago

Or you can just hack the XPI file: unzip, edit background-scripts/background.js with the changes in the above patch, delete the META-INF directory, re-zip and install.

Note: installation of non-signed XPIs requires that xpinstall.signatures.required be set to false in about:config