Full Disclosure mailing list archives

Re: extension for Firefox to force HTTPS always?


From: gjgowey () tmo blackberry net
Date: Sat, 13 Oct 2007 02:15:39 +0000

I don't know about a browser extension, but you might be able to install apache with mod_ssl, mod_proxy, and 
mod_rewrite locally then basically have it take care of everything.

Geoff

Sent from my BlackBerry wireless handheld.

-----Original Message-----
From: Valdis.Kletnieks () vt edu

Date: Fri, 12 Oct 2007 21:55:37 
To:Kristian Erik Hermansen <kristian.hermansen () gmail com>
Cc:full-disclosure () lists grok org uk
Subject: Re: [Full-disclosure] extension for Firefox to force HTTPS always?


On Fri, 12 Oct 2007 15:06:14 PDT, Kristian Erik Hermansen said:
I just wanted to clarify that I am looking for an extension that will
rewrite all encountered HTTP references in Firefox to HTTPS.  I would
already have a firewall or some other layer7 filtering device blocking
unencrypted traffic.  The addon "Better Gmail" does something similar
to this, with the "force HTTPS" option, but not exactly...

What should this hypothetical extension do if it automagically redirects
http: to https:, but the target server is something that is only listening
on port 80 because it doesn't have https: enabled?

https://www.cnn.com just sorta sits there for me.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


Current thread: