<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=utf-8">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:SimSun;
panose-1:2 1 6 0 3 1 1 1 1 1;}
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Segoe UI";
panose-1:2 11 5 2 4 2 4 2 2 3;}
@font-face
{font-family:"\@SimSun";
panose-1:2 1 6 0 3 1 1 1 1 1;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0pc;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
tt
{mso-style-priority:99;
font-family:"Courier New";}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0pc;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Segoe UI","sans-serif";
color:windowtext;
position:relative;
top:0pt;
mso-text-raise:0pt;
letter-spacing:0pt;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:51.0pc 66.0pc;
margin:6.0pc 6.0pc 6.0pc 6.0pc;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="2050" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>EFF
HTTPS EVERYWHERE Firefox XPI Plug-in Performance using FACEBOOK!<o:p></o:p></span></p>
<p class=MsoNormal><b><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></b></p>
<p class=MsoNormal><b><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>FEEDBACK<o:p></o:p></span></b></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>After
downloading from the EFF website and having installed the Firefox XPI Plug-in called
“HTTPS Everywhere” version 0.2.2 in the Firefox version 3.6.10, running on a
Windows XP Pro SP3 operating system the following condition was experienced.<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>When
I select the option from the HTTPS EVERYWHERE application to use SSL on
FACEBOOK, it does NOT redirect the “active web content” that Facebook makes use
of. In fact, there is NO warning in Firefox, that “active web content” isn’t
using SSL on a SSL encrypted website, unlike Microsoft Internet Explorer,
tested in v6 and v7, which does pop up a security warning asking the browser
user if they want to display non secure items!<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><img
width=325 height=149 id="Picture_x0020_0"
src="cid:image001.jpg@01CB5702.887967C0" alt="2010 09 18 0010.jpg"></span><span
style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>So
is the EFF HTTPS EVERYWHERE Firefox Plug-in looking like a big bank vault for
customers (Firefox users) with a gapping hole in the back side? <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>Sure
enough, when one checks the “html code” on the Facebook web pages, there is
plenty of non secure URL’s and non secure active web content! <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><img
width=1179 height=363 id="Picture_x0020_1"
src="cid:image002.jpg@01CB5703.21F98470" alt="2010 09 18 0032.jpg"></span><span
style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>An
additional issue when using the EFF HTTPS Everywhere was when attempting to
view any FACEBOOK photo album, which either doesn’t display completely or takes
a rather long time to display all of the photos (thumbnail views) with
additional F5 webpage refreshes required. <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>Just
for the sake of testing, I tried using Facebook on different PC’s by switching
between “http” and “https” to see what happens. In all cases, when Facebook was
using SSL it had problems displaying photos, whereas non secure “http” was
blazing fast, without needing the web page to be refreshed. <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>How
does using SSL prevent loading (displaying) photos that are sent encrypted
using SSL? I’m NOT a web designer, just take a look here below…<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><img
width=608 height=336 id="Picture_x0020_3"
src="cid:image003.jpg@01CB5703.ABD45990" alt="2010 09 18 0033.jpg"></span><span
style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>As
you see in the picture above inline, it shows some of the SSL traffic, showing
those photos to be encrypted, so why does using SSL only on Facebook, delay and
prevent (missing) photos from displaying. Let, me make this more clear, in that
some of the photos begin to load and display on the Facebook photo album
webpage, but many do NOT and some take a very long time, from seconds to
minutes, to half an hour, just for thumbnails to appear! Even when refreshing
the web page, which helps to display more photos, it still acts like something
freezes for the behavior of using SSL with Facebook. <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>As
soon as SSL isn’t used, then those same thumbnail photos load and display
almost instantly, even a hundred of them at a time. So somehow those photos are
loaded in a manner that the active web content which isn’t SSL traffic produces
a delay? I don’t understand, but the PC is working good, other websites don’t
have this issue, when using SSL traffic. The same problem happens on multiple
different computers regarding FACEBOOK when using the SSL method. So it’s NOT
an issue with the PC, or the operating system, not the browsers, as different
ones were used on different computers and all demonstrated the same repeating
issue no matter. <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><b><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>How
to secure Facebook?</span></b><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>
So that Facebook is using full SSL/TLS using 256 bit in Firefox, including
active web content? When does a social website for which millions are using, get
serious with privacy security? <o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>Thanks
for reading!<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>Sincerely,<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'>V<o:p></o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='font-size:18.0pt;font-family:"Segoe UI","sans-serif"'><o:p> </o:p></span></p>
</div>
</body>
</html>