[HTTPS-Everywhere] using web.archive.org for non-https URLs?

Jacob S Hoffman-Andrews jsha at eff.org
Thu Aug 14 05:55:48 PDT 2014


Cool idea! I think it's probably not a fit for HTTPS Everywhere, 
though. Part of the reason we want everybody to be able to talk 
HTTPS with their favorite web sites is that your browsing is 
encrypted all the way to the web site, so what you read is just 
between you and the sites you visit.

If we added web.archive.org in the middle as a proxy, (a) the 
Archive would know what you're browsing, and (b) someone tapping the 
network on the other side of the Archive would know what you're 
browsing.

Proxies are a valid and useful tool for a lot of use cases, but I 
think users are better off choosing a full proxy and using the 
functionality in their browser.

Thanks,
Jacob

On 08/14/2014 02:36 AM, Paul Wise wrote:
> Hi all,
>
> Possibly crazy idea:
>
> web.archive.org uses https.
>
> web.archive.org has an option to be a proxy to other sites, via the save
> URL option.
>
> For sites with only http available, https-everywhere could redirect to
> web.archive.org.
>
> This won't work for dynamic websites though but those could be
> whitelisted.
>
> Thoughts?
>
>
>
> _______________________________________________
> HTTPS-Everywhere mailing list
> HTTPS-Everywhere at lists.eff.org
> https://lists.eff.org/mailman/listinfo/https-everywhere

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.eff.org/pipermail/https-everywhere/attachments/20140814/d167e1eb/attachment.html>


More information about the HTTPS-Everywhere mailing list