[HTTPS-Everywhere] A verdict on the Amazon rule?

[Peter Eckersley]

On Thu, Aug 26, 2010 at 10:04:15PM +0100, Robert wrote:
> > We can reach out to Amazon to see if they're willing to fix these problems on
> > the server side, but in the mean time, I'm inclined to turn the Amazon rule
> > off in the next release (leaving it available if anyone wants to turn it back
> > on).  Thoughts?
> 
> As far as I can see it appears to be a .com issue only*, so perhaps
> split the amazon rules so .com can be disabled by default while all
> the others stay active.
> 
> * I've had no issue with .co.uk and brief tests with the others.

Just now I was able to reproduce the error in the "preview all songs" Flash
applet.  At this page, for instance:

https://www.amazon.co.uk/gp/product/B000GPAPW2/ref=s9_ri_bw_ir03

I haven't tried to reproduce the other specific reports.

-- 
Peter Eckersley                            pde at eff.org
Senior Staff Technologist         Tel  +1 415 436 9333 x131
Electronic Frontier Foundation    Fax  +1 415 436 9993