23

I really like this HTTPS Everywhere add-on for Firefox. But I tend to browser hop, so have similar HTTPS-preferring add-ons been released for the other major browsers?

7 Answers 7

4

In the years since this question was asked, the EFF has made progress developing versions of HTTPS Everywhere for other browsers.

Supported browsers

Currently, HTTPS Everywhere is available for the following browsers:

The Chrome and Opera versions used to be in beta when this answer was originally written, but all versions listed above have now entered stable phase.

1
  • While that is very nice formatting, it's usually best to stick with the more conventional Markdown formatting tools to ensure proper display on all devices ;) Mar 31, 2014 at 9:55
9

Beware that regarding KB SSL Enforcer, HTTPS Everywhere looks rather cautious.

The front page states

There is a Chrome extension called KB SSL Enforcer which attempts to take that approach, but it does not appear to be implemented securely; when we tested it, it seemed to always use http before https, which means that your surfing habits and authentication cookies are not protected (this may be a limitation of the Chrome Extensions framework).

There is also a specific entry in the FAQ about the add-on topic from a broader perspective:

Q. Will there be a version of HTTPS Everywhere for Chrome? Or IE, Safari, Opera, or some other browser?

A. Our understanding is that the Chrome extensions API does not support request rewriting. That means that there is currently no way to write a secure version of HTTPS Everywhere without modifying the Chrome source code. However, Chrome's developers have shown interest in supporting extensions of this sort, so this limitation may change in a future version of Chrome. We believe the IE and Safari APIs have similar limitations. But if you happen to know a way to perform secure request rewriting in these browsers, feel free to let us know at https-everywhere at EFF.org (but note that modifying document.location or window.location in JavaScript is not secure).

Note: For a safer browsing, the provided links will redirect one to https page ;-)

Note 2: The author of KB SSL Enforcer is well aware of the issue (cf. issue #25)

8

Look in to KB SSL Enforcer http://goo.gl/8xeB and see if that will do what you are looking for. I have not tried it but it seems to do the same thing.

Secure Login Helper http://goo.gl/5f8R also seems to do this but only to login sites, not everything.

2
  • 4
    According to the EFF this extension does not work correctly: ".. but it does not appear to be implemented securely; when we tested it, it seemed to always use http before https, which means that your surfing habits and authentication cookies are not protected" - cite from eff.org/https-everywhere
    – Robert
    Jan 18, 2011 at 18:45
  • I never tried either of these and after looking at the new EFF pages would not suggest them. As is in the new top accepted solution I would now suggest eff.org/https-everywhere for both Firefox and Chrome.
    – David Remy
    Mar 1, 2012 at 21:15
2

You can add --force-https to your Chrome shortcut.

http://www.zdnet.com/blog/security/google-adds-https-only-browsing-to-chrome/2369

3
  • 3
    Isn't that stopping access to like 99% of the web?
    – Arjan
    Jul 10, 2010 at 16:26
  • I'm sorry...you might be right. I didn't actually read much into the technical details; I just assumed it was a force-https-where-available kind of mode, but you might be right.
    – jrc03c
    Jul 11, 2010 at 3:17
  • 2
    This answer is wrong - the presented command line parameter only forces the SSL certificate verification, but it uses SSL not more often than before.
    – Robert
    Jan 18, 2011 at 18:49
2

Please look at HTTPS Enforcer. It is a Google Chrome extension, and it uses database from Firefox https everywhere extension.

The HTTPS Enforcer extension makes it easy to ensure you’re connecting to secure sites by rewriting all requests to an HTTPS URL whenever you visit one of the sites HTTPS Everywhere supports.

1

I use TwitterSSL and FacebookSSL in Safari. Can't edit the search engine so Google SSL in the search box is a no go :(

1

From the EFF FAQ

Q. Will there be a version of HTTPS Everywhere for Chrome? Or IE, Safari, Opera, or some other browser? A. The Chrome extensions API does not support request rewriting. That means that there is currently no way to write a secure version of HTTPS Everywhere without modifying the Chrome source code. However, Chrome's developers have shown interest in supporting extensions of this sort, so this limitation may change in a future version of Chrome. We believe the IE and Safari APIs have similar limitations. But if you happen to know a way to perform secure request rewriting in these browsers, feel free to let us know at https-everywhere at EFF.org (but note that modifying document.location or window.location in JavaScript is not secure).

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .