[HTTPS-Everywhere] Fix for google autocomplete

[Peter Eckersley]

Hi Andres,

The broken autocomplete in the search bar is an unfortunate side-effect of a
fix to a couple of bugs wherein auto-suggest queries would be sent
unencrypted, which effectively makes those searches non-encrypted.

Mike has spent a lot of time trying to work out how not to break the
autocomplete, but he hasn't found a way yet AFAIK [*].  

One better workaround than the changes you made would be to write add a new
search engine definition to Firefox so that it sends its queries over https by
default.

I'm not sure how to do that, but it should be quite easy.

--------------------

[*] The underlying technical issue is that the search uses a particular kind
of XMLRPC request which is hard to rewrite to https, and when HTTPS Everywhere
finally succeeds in doing that (using Channel replacement), Firefox's search
code no longer receives the suggestion results.

On Sun, Jul 25, 2010 at 10:24:47PM -0400, Andres Osorio wrote:
> Hi
> 
> Thanks for a great plug-in
> 
> I modified Google.xml file because it broke search bar autocomplete in
> Firefox 4.0beta
> 
> This is what I changed:
> 1. Added a exclusion for *suggestqueries.google.com*
>   <exclusion pattern="^http://suggestqueries\.google\.com/complete/search"/>
> 
> 
> 2. Deleted this rule:
>   <rule from="^http://suggestqueries\.google\.com/complete/search"
>           to="https://clients1.google.com/complete/search"/>
> 
> I'm not sure if this problem affects previous Firefox versions since I only
> tested with 4.0
> 
> Regards
> Andres Osorio

> _______________________________________________
> HTTPS-everywhere mailing list
> HTTPS-everywhere at mail1.eff.org
> https://mail1.eff.org/mailman/listinfo/https-everywhere


-- 
Peter Eckersley                            pde at eff.org
Senior Staff Technologist         Tel  +1 415 436 9333 x131
Electronic Frontier Foundation    Fax  +1 415 436 9993