<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div><br></div><div>Warning: SSL Everywhere is BROKEN with <a href="http://npr.org">npr.org</a> !</div><div><br></div><div>Please REMOVE support for it in your SSL Everywhere plugin.</div><div><br></div><div>They have a "stub" SSL support with a BROKEN certificate (!!!), which eventually (theoretically) redirects to non-SSL site… but first users have to AGREE to security exceptions, which is creepy and wrong, and facilitates man in the middle attacks long term if they ever support SSL 'properly'.</div><div><br></div><div>From NPR itself… from the email address <a href="mailto:npr_response@npr.org">npr_response@npr.org</a></div><div><br></div><blockquote class="webkit-indent-blockquote" style="margin: 0 0 0 40px; border: none; padding: 0px;">---<span class="Apple-style-span" style="font-family: Arial; ">We appreciate you sharing your concerns. </span><span class="Apple-style-span" style="font-family: Arial; "><a href="http://NPR.org/">NPR.org</a></span><span class="Apple-style-span" style="font-family: Arial; "> does not support HTTPS Everywhere and our site does not use https protocol. We do offer secure login for</span><span class="Apple-style-span" style="font-family: Arial; "><a href="http://NPR.org/">NPR.org</a></span><span class="Apple-style-span" style="font-family: Arial; "> accounts, however we use </span><span class="Apple-style-span" style="font-family: Arial; "><a href="http://secure.npr.org/">secure.npr.org</a></span><span class="Apple-style-span" style="font-family: Arial; "> for login activities. ---</span></blockquote><div><font class="Apple-style-span" face="Arial"><br></font></div><div><font class="Apple-style-span" face="Arial"><br></font></div><div><font class="Apple-style-span" face="Arial"> -- JX</font></div><div><font class="Apple-style-span" face="Arial"><br></font></div><div><font class="Apple-style-span" face="Arial">p.s. my email from them was from <a href="mailto:npr_response@npr.org">npr_response@npr.org</a> , signed by Justin at "NPR Audience Partnership" 202-513-3232</font></div><div><font class="Apple-style-span" face="Arial"><br></font></div><div><font class="Apple-style-span" face="Arial"><br></font><div><div apple-content-edited="true">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="orphans: 2; text-indent: 0px; widows: 2; -webkit-text-decorations-in-effect: none; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><br><b>JX Bell</b><br>(415) 225-8281<br><a href="mailto:JX@doitall.com">JX@doitall.com</a><br>http://doitall.com<br>http://JXphotography.com<br>http://JXconsulting.com/resume<br><br><br></div></span></div>
</div>
<div><br></div></div></div></body></html>