SSL only firefox add-on?

Seth David Schoen schoen at
Fri Jun 18 00:44:55 UTC 2010

judaiko judaiko writes:

> Let me say this first:
> One company had a firewall that blocked all non SSL traffic.
> So if you go and you sign in, it will stop you
> at one URL which was not https.
> I am not sure if Gmail still does this i.e. redirect you to non https
> (http) url after login, and then again go into https mode when you
> enter gmail.
> So this firewall used to give error saying not allowed, but when you
> changed it to https, the previous Gmail redirect url worked, and I
> could login to Gmail.
> Now is there an add-on that does this in Firefox?
> Block ALL http traffic by default?

EFF has been working on one called HTTPS Everywhere:

There are some subtle issues around situations where a site
supports HTTPS for some resources but not others.  For example,
you can currently use

for encrypted web search, but only the unencrypted form

for translation services.  As a result, HTTPS Everywhere has a
database of rules with exceptions, so that a rule can apply to
only a portion of a site.

This may not do exactly what you want because you might prefer
to block HTTP URLs entirely, rather than allowing them only if
no HTTPS equivalent exists.  You could probably achieve this in
HTTPS Everywhere by adding a local wildcard rule that matches
every HTTP site and redirects it to an intentionally broken
page, such as a URL within your local host.  The means of setting
up your own local rewrite rules are described at

Seth Schoen
Senior Staff Technologist                         schoen at
Electronic Frontier Foundation          
454 Shotwell Street, San Francisco, CA  94110     +1 415 436 9333 x107
To unsubscribe, send an e-mail to majordomo at with
unsubscribe or-talk    in the body.

More information about the tor-talk mailing list