[HTTPS-Everywhere] HTTPS Everywhere even more everywhere?

Weston Ruter westonruter at gmail.com
Sun Nov 7 21:51:13 PST 2010


Thanks for your work on the HTTPS Everywhere extension for Firefox. It's a
critical improvement in safe browsing.

However, I wonder if the functionality could be promoted from the browser
level to the operating system level in general? All browsers and
applications should be forced to use secure connections. For example, I
believe Google Notifier was guilty of making requests over HTTP unless a
hidden preference was set.

Specifically, what if there was an HTTPS Everywhere local proxy set up that
examined every request and if it was to an insecure HTTP resource that has a
secure HTTPS equivalent, it would intercept the request and return a
redirect to the HTTPS resource before the system ever communicated over the
insecure connection.

Has this been looked into?

Thanks again.

-- 
Weston Ruter
http://weston.ruter.net/
@westonruter <http://twitter.com/westonruter> - Google
Profile<http://www.google.com/profiles/WestonRuter#about>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.eff.org/pipermail/https-everywhere/attachments/20101108/ff2eaad7/attachment.html>


More information about the HTTPS-everywhere mailing list