[HTTPS-Everywhere] Enabling and disabling all websites with CAcert certificates

[Pablo Castellano]

Hi, it's good to see that you like the idea ;-)
However, you are proposing much more generic and hard solutions which
may be useful in the future but are harder to implement and maybe they
are not worth.

My idea, which is easier to implement, is just creating a new attribute
for the <ruleset> tag.
Example:
<ruleset name="EFF" cacert="yes">
 [...]
</ruleset>

or defining a special keyword "CAcert" for the default_off attribute.
Example:
<ruleset name="ccc.de" default_off="CACert">
 [...]
</ruleset>

so that it would identify a website that is disabled by default because
the certificate belongs to CAcert.

Then the checkbox "Trust CAcert", if enabled, would scan the list of
rulesets and enable automatically those rulesets where
default_off="CAcert" or cacert="yes".

I don't have any experience developing firefox extensions but I could
try to submit a patch if you like the idea.

Regards, Pablo.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 2006 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.eff.org/pipermail/https-everywhere/attachments/20110513/6aa1dbb0/attachment.bin>