[HTTPS-Everywhere] Cloudfront fails.

Peter Eckersley pde at eff.org
Sat Apr 21 12:58:11 PDT 2012


The Cloudfront ruleset also appears to be responsible for this:

https://trac.torproject.org/projects/tor/ticket/4593

I worry, though, that disabling cloudfront entirely is going to massively
increase insecure mixed content across a lot of other sites.  What do people
think?  Is anyone interested in diving in and trying to work out the causes
for these instances of breakage?

On Sat, Apr 21, 2012 at 02:15:02PM -0400, Erik Harris wrote:
> My wife bought some audio thing from www.soundstrue.com and when she
> asked me to download it and burn it to a CD for her, I kept getting
> errors. It turns out that they're using Cloudfront to host the
> files, and it doesn't work with HTTPS-Everywhere. I had to disable
> the rule in order to download the files for her.
> 
> I'm using HTTPS-Everywhere 3.0dev1 in Firefox 12 Beta.
> 
> -- 
> 
> Erik Harris                               http://www.eHarrisHome.com
> 
> "The most common of all follies is to believe passionately in the
> palpably not true. It is the chief occupation of mankind." - HL
> Mencken
> 
> _______________________________________________
> HTTPS-everywhere mailing list
> HTTPS-everywhere at mail1.eff.org
> https://mail1.eff.org/mailman/listinfo/https-everywhere

-- 
Peter Eckersley                            pde at eff.org
Technology Projects Director      Tel  +1 415 436 9333 x131
Electronic Frontier Foundation    Fax  +1 415 436 9993




More information about the HTTPS-everywhere mailing list