Browser Extensions I Can't Live Without

Re:Browser Extensions I Can't Live Without by notpiika on Tuesday August 11, 2020 @09:30PM (#24127780)

IIRC, you have to enable the "strict" mode, or something along those lines, in the settings before it rejects HTTP connections from being made. I had the same issue.

[ Parent | on HN ]

Re:Browser Extensions I Can't Live Without by mehrdadn on Tuesday August 11, 2020 @09:35PM (#24127804)

Thanks, but then what do I do about HTTP-only sites? Why can't it default to HTTPS and then auto-fallback to HTTP when HTTPS connections fail for sites that aren't in the known-HTTPS list? It seems like a logical thing to do instead of just going straight to HTTP.

[ Parent | on HN ]

Re:Browser Extensions I Can't Live Without by tialaramex on Tuesday August 11, 2020 @10:04PM (#24127930)

This only helps you at all against passive adversaries.

An active adversary will just cheerfully block that HTTPS connection because you'll fall back to insecure silently.

[ Parent | on HN ]

Re:Browser Extensions I Can't Live Without by mehrdadn on Tuesday August 11, 2020 @10:07PM (#24127937)

I fully understand that and that's still clearly still better than going straight to HTTP, which it's already doing.

[ Parent | on HN ]