Re: [Full-disclosure] extension for Firefox to force HTTPS always?

[gjgowey@xxxxxxxxxxxxxxxxxx]

I don't know about a browser extension, but you might be able to install apache 
with mod_ssl, mod_proxy, and mod_rewrite locally then basically have it take 
care of everything.

Geoff

Sent from my BlackBerry wireless handheld.

-----Original Message-----
From: Valdis.Kletnieks@xxxxxx

Date: Fri, 12 Oct 2007 21:55:37 
To:Kristian Erik Hermansen <kristian.hermansen@xxxxxxxxx>
Cc:full-disclosure@xxxxxxxxxxxxxxxxx
Subject: Re: [Full-disclosure] extension for Firefox to force HTTPS always?


On Fri, 12 Oct 2007 15:06:14 PDT, Kristian Erik Hermansen said:
> I just wanted to clarify that I am looking for an extension that will
> rewrite all encountered HTTP references in Firefox to HTTPS.  I would
> already have a firewall or some other layer7 filtering device blocking
> unencrypted traffic.  The addon "Better Gmail" does something similar
> to this, with the "force HTTPS" option, but not exactly...

What should this hypothetical extension do if it automagically redirects
http: to https:, but the target server is something that is only listening
on port 80 because it doesn't have https: enabled?

https://www.cnn.com just sorta sits there for me.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/