Is there an https everywhere add on for chrome, MSIE or safari?

Question

I really like this https everywhere add on for Firefox. But I tend to browser hop, so have similar https-preferring add-ons been released for the other major browsers?

Answer 1

An alpha version of HTTPS Everywhere for Chrome(and Chromium) has been released about three weeks ago. The Google Chrome Dev team has developed the WebRequest API which made the whole thing possible. It's working perfectly for me.

For Chrome 17 and above, the CRX file is here.

More info:

• An Official HTTPS Everywhere for Chrome|Chromium 18
• 2012.2.9 for Chrome released (now installable on Chrome 17 stable)

Answer 2

Beware that regarding KB SSL Enforcer, HTTPS Everywhere looks rather cautious.

The front page states

There is a Chrome extension called KB SSL Enforcer which attempts to take that approach, but it does not appear to be implemented securely; when we tested it, it seemed to always use http before https, which means that your surfing habits and authentication cookies are not protected (this may be a limitation of the Chrome Extensions framework).

There is also a specific entry in the FAQ about the add-on topic from a broader perspective:

Q. Will there be a version of HTTPS Everywhere for Chrome? Or IE, Safari, Opera, or some other browser?

A. Our understanding is that the Chrome extensions API does not support request rewriting. That means that there is currently no way to write a secure version of HTTPS Everywhere without modifying the Chrome source code. However, Chrome's developers have shown interest in supporting extensions of this sort, so this limitation may change in a future version of Chrome. We believe the IE and Safari APIs have similar limitations. But if you happen to know a way to perform secure request rewriting in these browsers, feel free to let us know at https-everywhere at EFF.org (but note that modifying document.location or window.location in JavaScript is not secure).

Note: For a safer browsing, the provided links will redirect one to https page ;-)

Note 2: The author of KB SSL Enforcer is well aware of the issue (cf. issue #25)

Answer 3

Look in to KB SSL Enforcer http://goo.gl/8xeB and see if that will do what you are looking for. I have not tried it but it seems to do the same thing.

Secure Login Helper http://goo.gl/5f8R also seems to do this but only to login sites, not everything.

Answer 4

You can add --force-https to your Chrome shortcut.

http://www.zdnet.com/blog/security/google-adds-https-only-browsing-to-chrome/2369

Answer 5

Please look at HTTPS Enforcer. It is a Google Chrome extension, and it uses database from Firefox https everywhere extension.

The HTTPS Enforcer extension makes it easy to ensure you’re connecting to secure sites by rewriting all requests to an HTTPS URL whenever you visit one of the sites HTTPS Everywhere supports.

Answer 6

I use TwitterSSL and FacebookSSL in Safari. Can't edit the search engine so Google SSL in the search box is a no go :(

Answer 7

From the EFF FAQ

Q. Will there be a version of HTTPS Everywhere for Chrome? Or IE, Safari, Opera, or some other browser? A. The Chrome extensions API does not support request rewriting. That means that there is currently no way to write a secure version of HTTPS Everywhere without modifying the Chrome source code. However, Chrome's developers have shown interest in supporting extensions of this sort, so this limitation may change in a future version of Chrome. We believe the IE and Safari APIs have similar limitations. But if you happen to know a way to perform secure request rewriting in these browsers, feel free to let us know at https-everywhere at EFF.org (but note that modifying document.location or window.location in JavaScript is not secure).