[HTTPS-E Rulesets] Mozilla (dev branch) - fix for personas images

Christopher Liu cmliu00151 at gmail.com
Thu Jan 3 09:57:10 PST 2013


To whom it may concern:

Regarding the current state of the Mozilla ruleset in master, it
appears that getpersonas-cdn.mozilla.net (with a hyphen) needs to be
rewritten to getpersonas.cdn.mozilla.net (with a period) in order to
avoid breaking the images of personas that are already installed in
Firefox. That is,
<rule from="^https?://getpersonas-cdn\.mozilla\.net/"
	to="https://getpersonas.cdn.mozilla.net/" />
to be placed before the rule dealing with *.mozilla.net generally.

The problem is that getpersonas-cdn (with a hyphen) is hosted by
EdgeCast and thus doesn't have a valid certificate. (More precisely,
they are using Cedexis with EdgeCast as one of the CDN backends; the
CNAME chain I see is -> 2-01-2967-0004.cdx.cedexis.net ->
wac.1237.edgecastcdn.net -> gs1.wac.v2cdn.net)

C. Liu




More information about the HTTPS-Everywhere-Rules mailing list