EFF delivers HTTPS Not Quite Everywhere

Electronic Frontier Foundation

In the early hours of June 18 the Electronic Frontier Foundation and the Tor Project released a beta of a Firefox extension dubbed “HTTPS Everywhere” with the intention of providing encryption of user data when visiting certain sites. According to the official announcement, “HTTPS Everywhere” will provide SSL encryption to sites like Google Search, Wikipedia, Twitter and Identi.ca, and Facebook.

Inspired by Google's encrypted search option, privacy advocates EFF aim to help users make use of some sites' encrypted Web service. Many provide this service but default to unencrypted or link back to unencrypted pages. “HTTPS Everywhere” rewrites these page requests to HTTPS automatically for users.

The name “HTTPS Everywhere” is a bit misleading. Besides Google Search, Wikipedia, Twitter and Identi.ca, and Facebook this extension also works on the EFF and Tor sites, Ixquick, DuckDuckGo, Scroogle, other small search engines, the New York Times, The Washington Post, Paypal, and many other sites that offer HTTPS encryption. But that's hardly everywhere. Many sites, including a number of banks, fail to offer encryption of any kind. Many other sites with SSL encryption are still deemed unsafe due to domain-validated certificates while others include unencrypted third-party content. Users are urged to still observe browser cues (lock icons and such) in determining if your data may or may not be safe. In addition, this extension does not hide users' IP addresses or other personally identifiable information.

______________________

Susan Linton is a Linux writer and the owner of tuxmachines.org.

Comments

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

to bad they didnt make it do

turn_self_off's picture

to bad they didnt make it do https by default, and drop back to http if the encrypted port didnt respond.

White Paper
Linux Management with Red Hat Satellite: Measuring Business Impact and ROI

Linux has become a key foundation for supporting today's rapidly growing IT environments. Linux is being used to deploy business applications and databases, trading on its reputation as a low-cost operating environment. For many IT organizations, Linux is a mainstay for deploying Web servers and has evolved from handling basic file, print, and utility workloads to running mission-critical applications and databases, physically, virtually, and in the cloud. As Linux grows in importance in terms of value to the business, managing Linux environments to high standards of service quality — availability, security, and performance — becomes an essential requirement for business success.

Learn More

Sponsored by Red Hat

White Paper
Private PaaS for the Agile Enterprise

If you already use virtualized infrastructure, you are well on your way to leveraging the power of the cloud. Virtualization offers the promise of limitless resources, but how do you manage that scalability when your DevOps team doesn’t scale? In today’s hypercompetitive markets, fast results can make a difference between leading the pack vs. obsolescence. Organizations need more benefits from cloud computing than just raw resources. They need agility, flexibility, convenience, ROI, and control.

Stackato private Platform-as-a-Service technology from ActiveState extends your private cloud infrastructure by creating a private PaaS to provide on-demand availability, flexibility, control, and ultimately, faster time-to-market for your enterprise.

Learn More

Sponsored by ActiveState