HarshadWadkar / httpfox

Automatically exported from code.google.com/p/httpfox
GNU General Public License v2.0
0 stars 0 forks source link

httpfox shows HTTP requests when they are in fact HTTPS as forced by HSTS #94

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Visit an HSTS web site, such as https://neg9.org (to cache an STS entry in 
Firefox 4)
2. With httpfox open, visit the same HSTS protected site w/o HTTPS in the 
protocol field, e.g. http://neg9.org/
3. httpfox will report a GET request made to http://neg9.org/, but in fact no 
HTTP connection is made, the browser has caught this and forced an HTTPS 
connection before the request hits the network stack.

This can be verified easily by running httpfox alongside wireshark, filtering 
for traffic on port 80 and optionally, the host in question.

What is the expected output? What do you see instead?

httpfox should report the request as https, not http.

What version of the product are you using? On what operating system?

httpfox 0.8.8, Firefox 4.0, Windows 7 x64

Original issue reported on code.google.com by ian@cdine.org on 22 Mar 2011 at 10:42

GoogleCodeExporter commented 9 years ago
tried to reproduce this and it works correctly for me. try to open http and it 
gets reported as https in httpfox

Original comment by pappkame...@gmail.com on 23 Mar 2011 at 8:27

GoogleCodeExporter commented 9 years ago

Original comment by pappkame...@gmail.com on 19 Dec 2011 at 4:40