[HTTPS-Everywhere] Verizon rule causes page to fail to load (2.0.dev.4)

[Peter Eckersley]

It's definitely a JavaScript redirect.  We have a few options:

1. Fix https://trac.torproject.org/projects/tor/ticket/4286

2. Someone can wade in an try write an exclusion for this
   (maybe for /secure/pages/viewbill/)?

3. File a bug with Verizon tech support and wait

4. Disable the ruleset

I'm lean towards 2 unless anyone is inspired by a different approach.

On Thu, Nov 17, 2011 at 09:17:25PM -0500, Erik Harris wrote:
> I just got my Verizon FIOS bill notification, and I clicked on the
> link that took me to the login page on www22.verizon.net, and it got
> stuck in an infinite reload cycle. As soon as I turned off the
> Verizon rule in HTTPS-Everywhere, it loaded (to a secure page, so
> it's some support content on the page that caused the problem).
> 
> I'm using HTTPS-Everywhere 2.0dev.4 in Firefox 9 beta on Win7 x64 Pro.
> 
> The link to view the bill in the email is:
> 
> https://www22.verizon.com/secure/pages/viewbill/?LOBCode=C&PromoTCode=EML19&PromoSrcCode=L&POEId=EM1SP
> 
> (Since I wasn't logged in, this redirected me to the login page)
> 

-- 
Peter Eckersley                            pde at eff.org
Technology Projects Director      Tel  +1 415 436 9333 x131
Electronic Frontier Foundation    Fax  +1 415 436 9993