[HTTPS-Everywhere] Wikiblame subverts HTTPS Everywhere

Andrew A. Gill andrew at lij.li
Sun Aug 22 10:21:29 PDT 2010


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Go to <http://wikipedia.ramselehof.de/wikiblame.php>.  Search for
something in the page history.  When you click on a link, you'll be
taken to the insecure Wikipedia site.  I'm not sure how that
happens, but this should probably be corrected.

Presumably, the issue is that you're looking at a diff, which is
something that you usually don't do unless you're already coming
from a Wikipedia site, so it must have fallen through the cracks
somehow.

Checking a link to a diff from another site shows that the problem
seems to be with diff links, and not Wikiblame in general.

- -- 
|  Andrew A. Gill    To ensure continued quality of service,   |
|                    this e-mail is being monitored by the NSA |
| <andrew at lij.li>              <http://www.needsfoodbadly.com> |
                                                              --
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.15 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxxXJkACgkQIeCXxXWexLpGTgCfQxdE3sP/PDP/m+q4/1nKwqOE
YuYAnAzkx0uB7MMftCzStrAuXJv0KeW9
=5Zvw
-----END PGP SIGNATURE-----



More information about the HTTPS-everywhere mailing list