[tor-bugs] #13423 [EFF-HTTPS Everywhere]: Cannot use HTTPS for amazon.com

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Oct 16 00:46:32 UTC 2014


#13423: Cannot use HTTPS for amazon.com
--------------------------------------+------------------
     Reporter:  cypherpunks           |      Owner:  zyan
         Type:  defect                |     Status:  new
     Priority:  major                 |  Milestone:
    Component:  EFF-HTTPS Everywhere  |    Version:
   Resolution:                        |   Keywords:
Actual Points:                        |  Parent ID:
       Points:                        |
--------------------------------------+------------------

Comment (by teor):

 This is a known issue:

 {{{
         This rule is off by default because it caused so many aspects of
 the
         Amazon site to break; see the mailing list archives for details.
         Currently being fixed...

         Amazon appears to operate in 7 countries, and does not hold the
 domains
         for some others, like .se or .be.  In other cases there is an
 http-only site
         that redirects to one of these 7 countries.


         amazon.com:

                 Does work:

                         - ap/           (appears to be purchase-management
 related)
                         - ([\w-]+/)?dp/ (i.e. dp/ possibly preceeded by
 title)
                         - e/\w{10,10}/  (i.e. e/ followed by ASIN)
                         - gp/cart
                         - gp/css
                         - gp/feature.html
                         - gp/redirect.html
                         - gp/registry/wishlist

                 Doesn't work:

                         - $                     (i.e. homepage)
                         - ([\w-]+/)?b/          (i.e. b/ preceeded by
 category)
                         - exec/obidos/ASIN/
                         - ([\w-]+/)gp/          (i.e. gp/ possibly
 preceeded by title)
                         - gp/goldbox($|\?)
                         - gp/kindle/pc($|\?)
                         - gp/pdp/profile($|\?)
                         - gp/product/
                         - gp/richpub/syltguides/byauthor($|\?)
                         - Help/
                         - l/
                         - s/


         amazon.cn:

                 Doesn't work:

                         - Everything?

         amazon.ca:

                 Does work:

                         everything except...

                 Doesn't work:

                         /mn/search/


         Partially covered domains:

                 - askville.amazon.com   (pages redirect to SendToHttp.do)

 -->
 <ruleset name="Amazon (broken)" default_off="breaks Look Inside the Book">
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13423#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list