search

aidanholm / luakit

A fork of a fast, small, webkit based browser framework extensible by Lua that uses GTK 3 and WebKit 2.
https://aidanholm.github.io/luakit/
GNU General Public License v3.0
38 stars 8 forks source link

Plugin: HTTPS everywhere #51

Open aidanholm opened 8 years ago

aidanholm commented 8 years ago

Possible implementation method: automatically rewrite http:// URIs to https:// URIs, and detect a subsequent load-status success or failure signal, adding to whitelist/blacklist as appropriate.

ff2000 commented 8 years ago

On Wed, 29 Jun 2016 14:48:10 -0700, Aidan Holm notifications@github.com wrote:

Possible implementation method: automatically rewrite http:// URIs to https:// URIs, and detect a subsequent load-status success or failure signal, adding to whitelist/blacklist as appropriate.

Automatically add to whitelist/blacklist? In the case such a blacklisted URI adds https in the future we could miss them. Possible fix: adding a timestamp 'lastProbe' or similar to the blacklist file and periodically (every 10 days?) probe again (and update the timestamp). Or let the user configure a timeout (-1 for never probe again?) because probes really could cause quite a lag... As there are many similar plugins for other browsers we also could use a blacklist file they offer and tell the user to update it regularly (like with adblock).

aidanholm commented 8 years ago

That's a good point. If probing takes too long, then it could be done in a separate invisible webview widget in parallel wth the original request.