[HTTPS-E Rulesets] [HTTPS-Everywhere] HTTPS Everywhere. Errors

Artyom Gavrichenkov ximaera at yandex.ru
Tue Feb 7 13:34:24 PST 2012


Hi everyone,

08.02.2012 00:47, Peter Eckersley пишет:
> Thanks for the bug report.  We'll fix them in the next release of HTTPS
> Everywhere.

Just to ease the fix, a patch follows (see below).

> (In general we seem to have had a lot of problems with Yandex subdomains.  I
> wonder if this is because we just haven't tested them all, or because they're moving
> targets.
> 
> In the former case, perhaps we should consider adjusting the ruleset to
> whitelist, rather than blacklist, subdomains for HTTPS.)

Sadly, when I was writing HTTPS Everywhere rules for the first time,
I've tested each and every link on http://www.yandex.ru/all and further,
and added exceptions for every service which wasn't serving content via
HTTPS. However, after that from time to time I faced problems accessing
domains that were previously working fine.

It's, to say, a mystery why https://stat.yandex.ru is working and
seemingly connected https://wordstat.yandex.ru is not.

It is now too late in Moscow, but I would get in touch with colleagues
from Yandex yesterday and discuss their attitude to supporting HTTPS in
their services. As the result of conversation I either will have some
kind confirmation that the list of Yandex services without HTTPS
wouldn't grow significantly soon or will rewrite the HTTPS config for
Yandex completely.

-- 
| Artyom Gavrichenkov | engineer, Highload Lab
| gpg: fa1c670e
| mailto: ximaera at yandex.ru
| mailto: ximaera at gmail.com
| xmpp: ximaera at gmail.com
| skype: xima_era
| tel. no: +7 916 515 49 58

-- Signed-off-by: Artyom Gavrichenkov <ximaera at yandex.ru>

diff --git a/src/chrome/content/rules/Yandex.xml
b/src/chrome/content/rules/Yandex.xml
index c8201f2..40c2a6e 100644
--- a/src/chrome/content/rules/Yandex.xml
+++ b/src/chrome/content/rules/Yandex.xml
@@ -50,6 +50,7 @@
     <exclusion pattern="^http://cards\.yandex\.ru/"/>
     <exclusion pattern="^http://dzen\.yandex\.ru/" />
     <exclusion pattern="^http://encyclopedia\.yandex\.ru/" />
+    <exclusion pattern="^http://feedback\.yandex\.ru/" />
     <exclusion pattern="^http://fotki\.yandex\.ru/" />
     <exclusion pattern="^http://images\.yandex\.ru/" />
     <exclusion pattern="^http://lingvo\.yandex\.ru/" />
@@ -66,6 +67,7 @@
     <exclusion pattern="^http://video\.yandex\.ru/" />
     <exclusion pattern="^http://wdgt\.yandex\.ru/" />
     <exclusion pattern="^http://weather\.yandex\.ru/" />
+    <exclusion pattern="^http://wordstat\.yandex\.ru/" />
     <exclusion pattern="^http://www\.yandex\.ru/" />
     <!-- Remove this if you do never post entries or comments on
my.ya.ru -->
     <exclusion pattern="^http://(www\.)?[^.]+\.ya\.ru/" />



More information about the HTTPS-Everywhere-Rules mailing list