[HTTPS-Everywhere] HTTPS by default for addresses with no scheme

Drake, Brian brian2 at drakefamily.tk
Wed Dec 22 18:44:52 PST 2010


I’m just throwing this idea out there, with no idea whether we can actually
do it: for addresses either typed into the address bar or specified in link
targets, make them HTTPS instead of HTTP by default. This would really be
secure by default.

(This feature should, of course, be turned off by default, for the same
reason we don’t just force every site to be HTTPS.)

--
Brian Drake

Alternate (slightly less secure) e-mail: brian at drakefamily.tk
Alternate (old) e-mail: brianriab at gmail.com

Facebook profile: Profile ID
100001206642672<https://ssl.facebook.com/profile.php?id=100001206642672>
Twitter username: BrianJDrake <https://twitter.com/BrianJDrake>
Wikimedia project username:
Brianjd<https://secure.wikimedia.org/wikipedia/meta/wiki/User:Brianjd>(been
inactive for a while)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eff.org/pipermail/https-everywhere/attachments/20101223/1456d658/attachment.html>


More information about the HTTPS-everywhere mailing list