News for hackers. Stuff that matters.

A comment on Blocking high-risk non-secure downloads. Parent comment

Re:Blocking high-risk non-secure downloads by PretzelFisch on Wednesday April 10, 2019 @10:04AM (#19624712)
That's not how I read it. The nonsecure download from a secure page is their starting point. The end goal is to block all unsecure downloads of high risk types.
[ Parent | on HN ]
Re:Blocking high-risk non-secure downloads by toomuchtodo on Wednesday April 10, 2019 @10:11AM (#19624795)
Is it possible to disallow all non secure/https requests in Chrome?
[ Parent | on HN ]
Re:Blocking high-risk non-secure downloads by A2017U1 on Wednesday April 10, 2019 @10:20AM (#19624880)
The EFF's httpseverywhere extension works well, you need to set it to block if it can't upgrade the connection to tls
[ Parent | on HN ]
Re:Blocking high-risk non-secure downloads by Someone1234 on Wednesday April 10, 2019 @10:33AM (#19625039)
Great concept but the plugin is an absolute memory hog, and they've been unable to fix it.

They closed the old bug for no real reason:

https://github.com/EFForg/https-everywhere/issues/1775

Then let the new bug rot:

https://github.com/EFForg/https-everywhere/issues/12232

They've now started deleting new comments on the new bug. I'm just not using it anymore.

[ Parent | on HN ]
Re:Blocking high-risk non-secure downloads by sucrose on Wednesday April 10, 2019 @10:47AM (#19625198)
The DuckDuckGo Privacy Essentials¹ extension is a great alternative that I switched to.

¹ https://chrome.google.com/webstore/detail/duckduckgo-privacy...

[ Parent | on HN ]
Re:Blocking high-risk non-secure downloads by Sahhaese on Wednesday April 10, 2019 @12:04PM (#19626020)
The easiest way to do that is to use your OS provided firewall to block all outgoing HTTP requests from chrome and only allow HTTPS.
[ Parent | on HN ]
Re:Blocking high-risk non-secure downloads by gambler on Wednesday April 10, 2019 @12:32PM (#19626321)
That's how I read it as well. Boiling the frogs.
[ Parent | on HN ]