[HTTPS-Everywhere] Https Everywhere for Internet Explorer possible

Julien Sobrier jsobrier at zscaler.com
Fri Mar 30 15:01:39 PDT 2012


Hello,
I'm a Security Research at Zscaler (California). I have published a
number of browser extensions to protect users on Firefox, Fennec, Google
Chrome, Safari and Opera: BlackSheep, Search Engine Security, Zscaler
Safe Shopping and Zscaler Likejacking Prevention.

I have recently started to develop browser extension for Internet
Explorer. I looked at Https Everywhere for Chrome, and I understand it
has 3 main functions:
1/ "Redirect" HTTP requests to HTTPS according to rules
2/ Rewrite links on the page to point to HTTPS
3/ Ensure that cookies have the secure attribute

1/ and 2/ are easy to do in a BHO for IE. The "redirection" is done by
blocking the request, and creating a new one (with a different URL).

3/ is also possible, from what I gather, but it is beyond my current
knowledge of BHO.

I am very interesting in providing Https Everywhere for Internet
Explorer, without the secure cookie n the first versions. Is it possible
for me to collaborate with the EFF on this release? I can support IE6 on
Windows XP SP3 to IE 9 on Windows 7.


Regards
Julien Sobrier, Zscaler



More information about the HTTPS-everywhere mailing list