[tor-bugs] #3777 [EFF-HTTPS Everywhere]: Should not generate mixed-content warnings if rewriting all http to https

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Fri Sep 23 16:15:13 UTC 2011


#3777: Should not generate mixed-content warnings if rewriting all http to https
----------------------------------+-----------------------------------------
 Reporter:  josh                  |          Owner:  pde     
     Type:  defect                |         Status:  accepted
 Priority:  normal                |      Milestone:          
Component:  EFF-HTTPS Everywhere  |        Version:          
 Keywords:                        |         Parent:          
   Points:                        |   Actualpoints:          
----------------------------------+-----------------------------------------
Changes (by pde):

  * status:  new => accepted


Comment:

 We will need a patch (or at least help from people who know about the
 XPCOM structure of the mixed content warnings) to deal with this.

 In terms of the indication that HTTPS Everywhere kept the site secure,
 that is theoretically the difference between the two shades of green you
 see for rulesets in the HTTPS Everywhere toolbar button.  In the current
 implementation, sometimes rulesets are downgraded from the strong green
 "kept this page secure/prevented mixed content" to the pale green "would
 have secured this page if necessary" because of changes in the page's top-
 level URL.  Typing www.google.com into the URLbar gives an example of this
 problem.

 Ideally we should get a better implementation of these indications in the
 toolbar menu, and we should change the colour of the icon for the toolbar
 menu according to what's going on with the rulesets inside it.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3777#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list