[HTTPS-Everywhere] Demo: HTTPS Switch Planner

Jacob Hoffman-Andrews jsha at newview.org
Mon Dec 30 20:21:35 PST 2013


Yan said:
> 1. It would be useful to see a list of the URLs that were rewritten
from HTTP to HTTPS by HTTPS Everywhere in addition to the ones that
couldn't be rewritten. I (putting on my web developer hat) could then
just go ahead and change those to HTTPS if they weren't already.

Yes, will do this. I'm also planning (once this is done) to make a
Rewriter tool that uses the ruleset to rewrite all references in source
code under a directory tree.

> 2. Do you think this would make sense as an extension of DevTools?

Possibly. I think it might be easier for now to make it part of an HTTPS
Everywhere options page, then make it part of DevTools if we implement
other SSL debugging tools down the line.

> 3. Should this also show cookie rewrites?
I think not. Cookies on third-party domains aren't generally
controllable by example.com's developer, so we shouldn't bother them
with something they can't fix.

Nick said:
> Maybe we can default-off switchPlannerMode on extension load?

Will do. I think I'll also put a 1-hour or 24-hour timer on it to
automatically turn it off when not in active use. That also mitigates
the fact that this serves an alternate copy of browser history when it's
turned on. Speaking of which, do you know any way to listen for "clear
browser history" events so we can clear our caches?


Glad you both like it! Will work on a better version.


More information about the HTTPS-Everywhere mailing list