[tor-bugs] #14027 [EFF-HTTPS Everywhere]: "wibni this site did https" button

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Dec 25 19:45:34 UTC 2014


#14027: "wibni this site did https" button
----------------------------------+---------------------
 Reporter:  cypherpunks           |          Owner:
     Type:  enhancement           |         Status:  new
 Priority:  normal                |      Milestone:
Component:  EFF-HTTPS Everywhere  |        Version:
 Keywords:                        |  Actual Points:
Parent ID:                        |         Points:
----------------------------------+---------------------
 Using FF 34.0 (Ubuntu Trusty), https-e 4.0.2, HTTPS Finder 0.91; NoScript
 and RequestPolicy.

 Feature requested is a "this site should really be using https" button or
 menu item,
 plus matching data collection and ranking.  It would add an interesting
 and useful
 dimension to the SSL Observatory data.

 Story which caused it: I went to `http://www.kb.cert.org/vuls/id/***`
 to find out about the gaping hole in my router.  https-finder stayed quiet
 (my fault, I
 think).  I'm left wondering why CERT don't redirect me, but I doubt
 they'll listen to me.
 Maybe if a few people tell you about the problem, and they're listed in a
 "Hall of HTTP[s]hame"..?

 (Cookery recipes by http don't bother me too much.
 Security recipes by http ''through the box with the vuln'' seems bad.)

 Being a voting feature, of course this can be spammed, though I would
 guess most likely
 innocently.  An opt-in random cookie browser-id could add signal to the
 ssl-o data:
 if I visit 1000 sites and report only one as "needs telling to fix https"
 that is more
 significant than pressing it everywhere I go.


 Thanks for your work!

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/14027>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list