[tor-bugs] #8077 [EFF-HTTPS Everywhere]: Broken page flow on scientificamerican.com
Tor Bug Tracker & Wiki
blackhole at torproject.org
Sun Feb 3 05:16:06 UTC 2013
#8077: Broken page flow on scientificamerican.com
-------------------------------------+--------------------------------------
Reporter: Fry-kun | Owner: MB
Type: defect | Status: closed
Priority: normal | Milestone:
Component: EFF-HTTPS Everywhere | Version:
Resolution: fixed | Keywords: httpse-ruleset-bug
Parent: | Points:
Actualpoints: |
-------------------------------------+--------------------------------------
Comment(by cypherpunks):
I think these exclusions may be overly broad.
Notice that all the problematic URLs contain ".pagespeed." (possibly
Scientific American is running an instance of Google Page Speed Service
for some of its content?)
As far as I could tell, a rule that strips everything from .pagespeed.
onward in www.scientificamerican.com URLs is enough to fix the problem on
this and some other blog posts. (To clarify, all the affected pages are on
blogs.scientificamerican.com; I did not notice problems with any ''pages''
on www.scientificamerican.com. However, the offending ''files'' are on the
www domain.)
If you don't feel comfortable doing that in any release branch, excluding
URLs that contain .pagespeed. is probably a good alternative.
Can someone elaborate as to what other content, if any, is "not available
through https"? I haven't seen any problems unrelated to this one; do I
need an account?
(I emailed the mailing list about this a few days ago; sorry for not
commenting here directly. It doesn't look like anyone's on the CC list for
this ticket, but I wasn't sure whether reopening it was an appropriate way
to get attention either - sorry for my inexperience w/ Trac)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8077#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list