[HTTPS-E Rulesets] Cheezburger - a couple exclusions to add and one to remove

Christopher Liu cmliu00151 at gmail.com
Wed Feb 13 14:20:30 PST 2013


To whom it may concern:

www.cheezburger.com stopped supporting https sometime within the last
couple days (it appears to time out). No downgrade should be
necessary, since all links pointing there seem to use absolute URLs.
This does NOT affect the 2-level domain cheezburger.com, which isn't equivalent.
We might want to continue testing for a few more days before
concluding it's really broken, though.

support.cheezburger.com has cert mismatch (hosted by Freshdesk)

--

developer.cheezburger.com should be removed from the
exclusions/downgrades, as it now has valid https.
Specifically, it is now enforcing https, so the downgrade causes a
redirect loop. The log message is a bit confusing, as it is written to
assume the more common (opposite) direction of redirect loop. However,
I ought to file that as a separate bug.


As usual, thank you for your time and help.

C. Liu




More information about the HTTPS-Everywhere-Rules mailing list