[HTTPS-E Rulesets] HTTPS Everywhere 3.5, 4.0dev.16, chrome-2014.4.14 released

[Yan Zhu]

Confusingly, there was a bug in the posted chrome-2014.4.14 packages
(but not in the builds from the git repository) that made none of the
rulesets work. I suspect there is an error somewhere in the HTTPS
Everywhere release scripts, which are somewhat different from the build
scripts in the git repo. Will investigate more tomorrow.

In the meantime, I've just posted chrome-2014.4.14.1 on eff.org and to
the Chrome web store, which fixes this bug by reverting back to
chrome-2014.1.3 (except for the version number, which needs to be
monotonically increasing):
https://www.eff.org/files/https-everywhere-chrome-2014.4.14.1.crx. But
if you've already fallen in love with the idea of using
chrome-2014-4-14, it should work if you build from this git tag and
install manually:
https://gitweb.torproject.org/https-everywhere.git/tag/a56b6fb78ebf02d34baad05b6860552040219d9f.

(Luckily I only live a 10-minute bike ride away from an airgapped
signing machine, so it is not implausible for me to post yet another
update overnight if things are still broken for some reason.)

Apologies for any confusion!
Yan

On 04/14/2014 07:17 PM, Yan Zhu wrote:
> Hi all,
> 
> The Heartbleed craziness seems to have reached a local minimum, so
> here's some HTTPS Everywhere releases to keep the OCSP responders busy.
> 3.5/chrome-2014.4.14 is an intermediate release before 4.0stable with
> some important ruleset updates [1]. In the meantime, 4.0development is
> still in ruleset-freeze mode.
> 
> There are also some significant non-ruleset changes to the codebase; see
> changelog below.
> 
> [1]
> https://gitweb.torproject.org/https-everywhere.git/blob/HEAD:/utils/alexa-logs/07042014.log
> 
> ====
> 
> HTTPS Everywhere 3.5 has been released:
> 
> https://www.eff.org/files/https-everywhere-3.5.xpi
> 
> From the Changelog:
>   * Merge all non-ruleset changes from 4.0development.16
>   * Merge all new/modified rulesets from 4.0development.16 that are
>   in the Alexa Top 1000 using utils/alexa-ruleset-checker.py. For a full
> list, see utils/alexa-logs/07042014.log.
> 
> 
> ====
> 
> HTTPS Everywhere 4.0development.16 has been released:
> 
> https://www.eff.org/files/https-everywhere-4.0development.16.xpi
> 
> From the Changelog:
>   * Restore code that loads custom rule files:
>   https://github.com/EFForg/https-everywhere/pull/156
>   * Use loadContext interface to get windows associated with requests
>   * Reduce annoying logging messages
>   * Report cert warning pages to SSL Observatory
>   * Remove SSL Observatory observers when disabled
>   * Don't set LOAD_REPLACE flag:
>   https://github.com/EFForg/https-everywhere/pull/134
>   * Add script to merge rulesets in Alexa Top 1M, thanks to Claudio MOretti:
>   https://github.com/EFForg/https-everywhere/pull/149
>   * 8 new rules
>   * 59 modified rules
> 
> ====
> 
> HTTPS Everywhere for Chrome 2014.4.14 has been released:
> 
> https://www.eff.org/files/https-everywhere-chrome-2014.4.14.crx
> 
> From the Changelog:
>   * Add SV localization
>   * Add persistent user-generated rules, thanks to Vijay P.:
>   https://github.com/EFForg/https-everywhere/pull/60
>   * Use onBeforeRedirect for redirect loop detection:
>   https://github.com/EFForg/https-everywhere/pull/199
>   * Remove unneeded onBeforeSendHeaders listener:
>   https://github.com/EFForg/https-everywhere/pull/172
>   * Fix host-only cookie bug:
>   https://github.com/EFForg/https-everywhere/pull/166
>   * Split incognito mode:
>   https://github.com/EFForg/https-everywhere/pull/165
>   * Cleanup pageAction icon code:
>   https://github.com/EFForg/https-everywhere/pull/173
>   * Add and modify some rulesets (same as 3.5)
> 
> 

-- 
Yan Zhu                           yan at eff.org
Staff Technologist                Tel  +1 415 436 9333 x134
Electronic Frontier Foundation    Fax  +1 415 436 9993

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: OpenPGP digital signature
URL: <https://lists.eff.org/pipermail/https-everywhere-rules/attachments/20140414/798edf79/attachment.sig>