News for hackers. Stuff that matters.

A comment on Why HTTPS Everywhere isn't on addons.mozilla.org. Parent comment

Re:Why HTTPS Everywhere isn't on addons.mozilla.org by kofalt on Tuesday November 25, 2014 @08:44PM (#8660812)
Shouldn't be terribly surprising: http://dayswithoutansslexploit.com

HTTPS might be better than getting a website in cleartext, but you'd have to be a madman to claim that HTTPS is safe, sane, or secure.

[ Parent | on HN ]
Re:Why HTTPS Everywhere isn't on addons.mozilla.org by johannh on Tuesday November 25, 2014 @08:50PM (#8660825)
True, I'm not surprised at all. HTTPS Everywhere-like functionality should be integrated into browsers and not a downloadable extra, tricking people into feeling fully secured.
[ Parent | on HN ]
Re:Why HTTPS Everywhere isn't on addons.mozilla.org by toomuchtodo on Tuesday November 25, 2014 @10:31PM (#8660990)
While not "everywhere"...

Force SSL only: http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security

Have site preloaded in Chrome: https://hstspreload.appspot.com

[ Parent | on HN ]
Re:Why HTTPS Everywhere isn't on addons.mozilla.org by mbrubeck on Wednesday November 26, 2014 @12:59AM (#8661263)
Firefox also has a built-in HSTS preload list, which I believe uses the Chrome list as one of its inputs: https://blog.mozilla.org/security/2012/11/01/preloading-hsts...
[ Parent | on HN ]