<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 2014-02-20 04:39, Dale Visser wrote:<br>
</div>
<blockquote cite="mid:COL128-W93048DAAB857BF650424C1899A0@phx.gbl"
type="cite">
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style>
<div dir="ltr">HTTPS Everywhere Maintainers:<br>
<br>
I love feedly.com. Its Firefox plugin, however insists on
sending me to the HTTP rather than HTTPS page. The attached
HTTPS Everywhere rule fixes this for me.<br>
<br>
Thank you for a great browser plug-in!<br>
<br>
Sincerely,<br>
Dale Visser<br>
<br>
</div>
</blockquote>
<br>
A couple thoughts...<br>
<br>
The <ruleset name> should be Feedly, not Twitter :) More
importantly though, for a time Feedly used cloud.feedly.com, this
URL should be included too, as certain URLs there still work,
allowing for a downgrade attack until such time as Feedly completely
eliminates the cloud version of the URL.<br>
<br>
(It's possible that the entire cloud.* URL has been redirected now,
I'm not quite sure. Better safe than sorry)<br>
<br>
Attached is the ruleset I've been testing for the last week or two,
with success.<br>
<br>
<pre class="moz-signature" cols="72">--
Dave Warren
<a class="moz-txt-link-freetext" href="http://www.hireahit.com/">http://www.hireahit.com/</a>
<a class="moz-txt-link-freetext" href="http://ca.linkedin.com/in/davejwarren">http://ca.linkedin.com/in/davejwarren</a>
</pre>
</body>
</html>