Expanding HTTPS Everywhere's Domain Support

20 Oct 2015 . category: tech . Comments
#privacy #opensource

Update: You no longer need HTTPS Everywhere to set HTTPS by default, major browsers now offer native support for an HTTPS only mode

HTTPS Everywhere is a collaboration project between the Tor Project and the Electronic Frontier Foundation (EFF). It’s a browser extension for Firefox, Chrome, and Opera that always opts in for HTTPS communication for every known domain that supports it. Tracking which domains support HTTPS communication is not an easy task and requires a community to support this.

Let’s see how you can help improve the repository of the tracked domains that support HTTPS. When you come across a website that is served over HTTP, try accessing it with HTTPS. If it works, you can easily add a rule for that website. To do this, fork the GitHub repository, navigate to src/chrome/content/rules, and run the following command:

./make-trivial-rule <domain>

For example, to generate a trivial rule for di.uoa.gr, run:

./make-trivial-rule di.uoa.gr

This will generate a default rule set file that looks like this:

<ruleset name="National and Kapodistrian University of Athens - Department of Informatics and Telecommunications">
  <target host="di.uoa.gr" />
  <target host="www.di.uoa.gr" />
  <rule from="^http:" to="https:" />
</ruleset>

Once you’ve created the rule, open a pull request on the HTTPS Everywhere GitHub repository. This is a quick and easy way to contribute to enhancing the privacy and security of many.


Me

A creative thinker who is not afraid to challenge the norm. His diverse track record includes failed startups, approved patents and scientific publications in top conferences and journals. Driven by a mission to protect what matters most to you.