Thread: HTTPS EVERYWHERE-Firefox add-on

https everywhere

firefox add-on produced collaboration between tor project
(https://www.torproject.org) , electronic frontier foundation (https://eff.org/). encrypts
communications number of major web sites, including google, wikipedia, , popular
social networking platforms such facebook , twitter.
many sites on web offer support encryption on https, make difficult to
use. instance, may connect http default, when https available. or
may fill encrypted pages links go unencrypted site. way, data
(such usernames , passwords) sent , received these web sites transferred as
plain text , easy read third parties.
https everywhere extension fixes these problems rewriting requests these sites
https. (although extension called "https everywhere", activates https on a
particular list of sites , can use https on sites have chosen support it. cannot
make connection site secure if site not offer https option.)
please note of sites still include lot of content, such images or icons, from
third party domains not available on https. always, if browser's lock icon is
broken or carries exclamation mark, may remain vulnerable adversaries that
use active attacks or traffic analysis. however, effort required monitor browsing
should still usefully increased.
web sites (such gmail) provide https support automatically, using https
everywhere protect ssl-stripping attacks, in attacker hides the
https version of site computer if try access http version.
additional information can found at: https://www.eff.org/https-everywhere.


nstallation

first, download https everywhere extension official web site:
https://www.eff.org/https-everywhere
select newest release.

configuration:
firefox>tools>add-ons


access https everywhere settings panel in firefox 4 (linux), click on firefox menu at
top left on screen , select add-ons manager. (note in different versions of
firefox , different operating systems, add-ons manager may located in different places
in interface.)

usage

once enabled , configured, https everywhere easy , transparent use. type an
insecure http url (for example, http://www.google.com).
press enter. automatically redirected secure https encrypted web site (in this
example: https://encrypted.google.com). no other action needed.

adding support additional sites in https everywhere

can add own rules https everywhere add-on favorite web sites. you
can find out how at: https://www.eff.org/https-everywhere/rulesets. benefit of
adding rules teach https everywhere how ensure access these sites
secure. remember: https everywhere not allow access sites securely unless
site operators have chosen make sites available through https. if site
not support https, there no benefit adding ruleset it.
if managing web site , have made https version of site available, good
practice submit web site official https everywhere release.

have time

Forum The Ubuntu Forum Community Ubuntu Specialised Support Security [all variants] HTTPS EVERYWHERE-Firefox add-on

Ubuntu