YF-GoogleCodeBackups / https-finder

Automatically exported from code.google.com/p/https-finder
0 stars 0 forks source link

Auto-forward (silent mode) needs to remember the domain and enforce SSL first #6

Closed GoogleCodeExporter closed 8 years ago

GoogleCodeExporter commented 8 years ago
With version 0.3, the auto-forward/silent mode retests every page (if it's an 
http page not https or any other protocol).  This is completely site reliant.  
For instance, if the HTTPS site contains links pointing to https, it's good.  
But if the HTTPS site has links pointing back to http, it redirects to http, 
then finds https, and redirects to the https version of the same page.  

I have the code working for intercepting all load url requests (which can halt 
them also - http://forums.mozillazine.org/viewtopic.php?t=501254).  

Once an SSL page is detected, we should remember that domain and rewrite 
requests as https for that session.  If https fails we can fall back on http 
(With an alert notification, or even a yes/no confirmation that the user is ok 
with this BEFORE letting the connection go insecure). 

Original issue reported on code.google.com by jacobsK...@gmail.com on 16 Mar 2011 at 6:24

GoogleCodeExporter commented 8 years ago

Original comment by jacobsK...@gmail.com on 16 Mar 2011 at 6:25

GoogleCodeExporter commented 8 years ago
[deleted comment]
GoogleCodeExporter commented 8 years ago
Changing this to low for now to stay focused on better detection and 
integration with HTTPS Everywhere, as users really should be using it for rule 
enforcement.  Since this is functionality provided by HTTPS Everywhere, it 
isn't as necessary at the moment as other features HTTPS Finder can provide.

Original comment by jacobsK...@gmail.com on 13 Apr 2011 at 4:30

GoogleCodeExporter commented 8 years ago
Closing issue - resolved in 0.6x and later

Original comment by jacobsK...@gmail.com on 3 Jun 2011 at 3:47