Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I really like this HTTPS Everywhere add-on for Firefox. But I tend to browser hop, so have similar HTTPS-preferring add-ons been released for the other major browsers?

share|improve this question

8 Answers 8

up vote 4 down vote accepted

In the years since this question was asked, the EFF has made progress developing versions of HTTPS Everywhere for other browsers.

Currently, HTTPS Everywhere is available for the following browsers:

Browser name Extension development phase
Firefox Stable
Firefox for Android Beta
Chrome Beta
Opera Beta

share|improve this answer
    
While that is very nice formatting, it's usually best to stick with the more conventional Markdown formatting tools to ensure proper display on all devices ;) –  Oliver Salzburg Mar 31 at 9:55
    
+1 for that source code. –  Michael Frank Mar 31 at 10:49

An alpha version of HTTPS Everywhere for Chrome(and Chromium) has been released about three weeks ago. The Google Chrome Dev team has developed the WebRequest API which made the whole thing possible. It's working perfectly for me.

For Chrome 17 and above, the CRX file is here.

More info:

share|improve this answer

Please look at HTTPS Enforcer. It is a Google Chrome extension, and it uses database from Firefox https everywhere extension.

The HTTPS Enforcer extension makes it easy to ensure you’re connecting to secure sites by rewriting all requests to an HTTPS URL whenever you visit one of the sites HTTPS Everywhere supports.

share|improve this answer

From the EFF FAQ

Q. Will there be a version of HTTPS Everywhere for Chrome? Or IE, Safari, Opera, or some other browser? A. The Chrome extensions API does not support request rewriting. That means that there is currently no way to write a secure version of HTTPS Everywhere without modifying the Chrome source code. However, Chrome's developers have shown interest in supporting extensions of this sort, so this limitation may change in a future version of Chrome. We believe the IE and Safari APIs have similar limitations. But if you happen to know a way to perform secure request rewriting in these browsers, feel free to let us know at https-everywhere at EFF.org (but note that modifying document.location or window.location in JavaScript is not secure).

share|improve this answer

I use TwitterSSL and FacebookSSL in Safari. Can't edit the search engine so Google SSL in the search box is a no go :(

share|improve this answer

Beware that regarding KB SSL Enforcer, HTTPS Everywhere looks rather cautious.

The front page states

There is a Chrome extension called KB SSL Enforcer which attempts to take that approach, but it does not appear to be implemented securely; when we tested it, it seemed to always use http before https, which means that your surfing habits and authentication cookies are not protected (this may be a limitation of the Chrome Extensions framework).

There is also a specific entry in the FAQ about the add-on topic from a broader perspective:

Q. Will there be a version of HTTPS Everywhere for Chrome? Or IE, Safari, Opera, or some other browser?

A. Our understanding is that the Chrome extensions API does not support request rewriting. That means that there is currently no way to write a secure version of HTTPS Everywhere without modifying the Chrome source code. However, Chrome's developers have shown interest in supporting extensions of this sort, so this limitation may change in a future version of Chrome. We believe the IE and Safari APIs have similar limitations. But if you happen to know a way to perform secure request rewriting in these browsers, feel free to let us know at https-everywhere at EFF.org (but note that modifying document.location or window.location in JavaScript is not secure).

Note: For a safer browsing, the provided links will redirect one to https page ;-)

Note 2: The author of KB SSL Enforcer is well aware of the issue (cf. issue #25)

share|improve this answer

Look in to KB SSL Enforcer http://goo.gl/8xeB and see if that will do what you are looking for. I have not tried it but it seems to do the same thing.

Secure Login Helper http://goo.gl/5f8R also seems to do this but only to login sites, not everything.

share|improve this answer
4  
According to the EFF this extension does not work correctly: ".. but it does not appear to be implemented securely; when we tested it, it seemed to always use http before https, which means that your surfing habits and authentication cookies are not protected" - cite from eff.org/https-everywhere –  Robert Jan 18 '11 at 18:45
    
I never tried either of these and after looking at the new EFF pages would not suggest them. As is in the new top accepted solution I would now suggest eff.org/https-everywhere for both Firefox and Chrome. –  David Remy Mar 1 '12 at 21:15

You can add --force-https to your Chrome shortcut.

http://www.zdnet.com/blog/security/google-adds-https-only-browsing-to-chrome/2369

share|improve this answer
3  
Isn't that stopping access to like 99% of the web? –  Arjan Jul 10 '10 at 16:26
    
I'm sorry...you might be right. I didn't actually read much into the technical details; I just assumed it was a force-https-where-available kind of mode, but you might be right. –  jrc03c Jul 11 '10 at 3:17
2  
This answer is wrong - the presented command line parameter only forces the SSL certificate verification, but it uses SSL not more often than before. –  Robert Jan 18 '11 at 18:49

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.