#httpseverywhere — Public Fediverse posts

If I use #httpseverywhere, is there any reason to use a #VPN? #privacy #infosec

If I use #httpseverywhere, is there any reason to use a #VPN? #privacy #infosec

If I use #httpseverywhere, is there any reason to use a #VPN? #privacy #infosec

If I use #httpseverywhere, is there any reason to use a #VPN? #privacy #infosec

If I use #httpseverywhere, is there any reason to use a #VPN? #privacy #infosec

HTTP or HTTPS?

I'm building a new static website, minimalist design etc, mostly about my hobbies and interests. Although, who knows, maybe in the future I will cover more controversial topics ...

Is there any good reason *not* to use HTTPS?

#http #https #httpseverywhere

HTTP or HTTPS?

I'm building a new static website, minimalist design etc, mostly about my hobbies and interests. Although, who knows, maybe in the future I will cover more controversial topics ...

Is there any good reason *not* to use HTTPS?

#http #https #httpseverywhere

HTTP or HTTPS?

I'm building a new static website, minimalist design etc, mostly about my hobbies and interests. Although, who knows, maybe in the future I will cover more controversial topics ...

Is there any good reason *not* to use HTTPS?

#http #https #httpseverywhere

HTTP or HTTPS?

I'm building a new static website, minimalist design etc, mostly about my hobbies and interests. Although, who knows, maybe in the future I will cover more controversial topics ...

Is there any good reason *not* to use HTTPS?

#http #https #httpseverywhere

HTTP or HTTPS?

I'm building a new static website, minimalist design etc, mostly about my hobbies and interests. Although, who knows, maybe in the future I will cover more controversial topics ...

Is there any good reason *not* to use HTTPS?

#http #https #httpseverywhere

Not sure of anyone has noticed yet but #FirefoxPreview for #Android alias #Fenix version 5 now supports more addons. Among those are #HTTPSEverywhere, #DarkReader and #NoScript. Still need #CookieAutoDelete though. ❌🍪
https://support.mozilla.org/en-US/kb/whats-new-firefox-preview

#Firefox #Mozilla

FEDI SECURITY ISSUE (please boost)

When we attempted to access a page at fediverse.party recently, we were served a page with an insecure connection, this is despite using #TorBrowser, which supposedly has #HttpsEverywhere?

So does anyone know what is going on here? Is fediverse.party susceptible to a #downgradeAttack?

Please boost so we can get to the bottom of it.

Es kommt vor, dass ich durch Browser Fremder das Internet betrachte und dabei regelrecht erschrecke. Daran merke ich, wie sehr ich daran gewöhnt bin, das Netz gefiltert durch die von mir installierten Browser-Erweiterungen zu betrachten. Viele Menschen wissen überhaupt nicht, wie leicht es ist, schöner zu browsen. ...

#Adblocker #Bitwarden #Browser #Cookies #Decentraleyes #Erweiterung #HTTPSEverywhere #Mailvelope #Passwordsafe #PrivacyBadger #Tracker #uBlockOrigin

https://svenbrier.de/7-browser-erweiterungen-fuer-dein-online-upgrade/

Maybe noteworthy to some:

If you see "https-rulesets​.org" in your #DNS logs going forward, there's a #browser somewhere on your network that needs attention.

The #HTTPSEverywhere browser extension, which was retired a couple years ago by EFF, periodically checked "https-rulesets​.org" for updates. That domain expired this week and got snatched up by a squatter. I don't think it resolved at all for most of 2024 and nothing should be querying it now.

Maybe noteworthy to some:

If you see "https-rulesets​.org" in your #DNS logs going forward, there's a #browser somewhere on your network that needs attention.

The #HTTPSEverywhere browser extension, which was retired a couple years ago by EFF, periodically checked "https-rulesets​.org" for updates. That domain expired this week and got snatched up by a squatter. I don't think it resolved at all for most of 2024 and nothing should be querying it now.

Maybe noteworthy to some:

If you see "https-rulesets​.org" in your #DNS logs going forward, there's a #browser somewhere on your network that needs attention.

The #HTTPSEverywhere browser extension, which was retired a couple years ago by EFF, periodically checked "https-rulesets​.org" for updates. That domain expired this week and got snatched up by a squatter. I don't think it resolved at all for most of 2024 and nothing should be querying it now.

Maybe noteworthy to some:

If you see "https-rulesets​.org" in your #DNS logs going forward, there's a #browser somewhere on your network that needs attention.

The #HTTPSEverywhere browser extension, which was retired a couple years ago by EFF, periodically checked "https-rulesets​.org" for updates. That domain expired this week and got snatched up by a squatter. I don't think it resolved at all for most of 2024 and nothing should be querying it now.

This push for #HTTPSEverywhere would've been perfectly fine if it just focused on #HTTPS / #TLS / #SSL as an option always available. But no, it also pushed for it to be mandatory (even if it doesn't make sense if you look at the #threatmodel), and as a result pretty much everything in the #web cannot be accessed with a #browser that doesn't have an up-to-date enough TLS support. Which is fine I guess if you're on a modern computer anyway, but a pain if you're on #retrocomputing. ​:seija_coffee:​

The #LetsEncrypt #centralization is also a serious concern, which is why I avoided using it for my #VPS.

RE: https://hamishcampbell.com/a-balanced-and-pragmatic-approach-to-native-openweb-security/

This push for #HTTPSEverywhere would've been perfectly fine if it just focused on #HTTPS / #TLS / #SSL as an option always available. But no, it also pushed for it to be mandatory (even if it doesn't make sense if you look at the #threatmodel), and as a result pretty much everything in the #web cannot be accessed with a #browser that doesn't have an up-to-date enough TLS support. Which is fine I guess if you're on a modern computer anyway, but a pain if you're on #retrocomputing. ​:seija_coffee:​

The #LetsEncrypt #centralization is also a serious concern, which is why I avoided using it for my #VPS.

RE: https://hamishcampbell.com/a-balanced-and-pragmatic-approach-to-native-openweb-security/

This push for #HTTPSEverywhere would've been perfectly fine if it just focused on #HTTPS / #TLS / #SSL as an option always available. But no, it also pushed for it to be mandatory (even if it doesn't make sense if you look at the #threatmodel), and as a result pretty much everything in the #web cannot be accessed with a #browser that doesn't have an up-to-date enough TLS support. Which is fine I guess if you're on a modern computer anyway, but a pain if you're on #retrocomputing. ​:seija_coffee:​

The #LetsEncrypt #centralization is also a serious concern, which is why I avoided using it for my #VPS.

RE: https://hamishcampbell.com/a-balanced-and-pragmatic-approach-to-native-openweb-security/

This push for #HTTPSEverywhere would've been perfectly fine if it just focused on #HTTPS / #TLS / #SSL as an option always available. But no, it also pushed for it to be mandatory (even if it doesn't make sense if you look at the #threatmodel), and as a result pretty much everything in the #web cannot be accessed with a #browser that doesn't have an up-to-date enough TLS support. Which is fine I guess if you're on a modern computer anyway, but a pain if you're on #retrocomputing. ​:seija_coffee:​

The #LetsEncrypt #centralization is also a serious concern, which is why I avoided using it for my #VPS.

RE: https://hamishcampbell.com/a-balanced-and-pragmatic-approach-to-native-openweb-security/

This push for #HTTPSEverywhere would've been perfectly fine if it just focused on #HTTPS / #TLS / #SSL as an option always available. But no, it also pushed for it to be mandatory (even if it doesn't make sense if you look at the #threatmodel), and as a result pretty much everything in the #web cannot be accessed with a #browser that doesn't have an up-to-date enough TLS support. Which is fine I guess if you're on a modern computer anyway, but a pain if you're on #retrocomputing. ​:seija_coffee:​

The #LetsEncrypt #centralization is also a serious concern, which is why I avoided using it for my #VPS.

RE: https://hamishcampbell.com/a-balanced-and-pragmatic-approach-to-native-openweb-security/

@workingclassgames or even better: Use @torproject #TorBorwser so #Tracking and #Ads are pointless!

Because it is @[email protected] #Firefox but with #uBlockOrigin, #HTTPSeverywhere and #NoScript already integrated and working fine...

@workingclassgames or even better: Use @torproject #TorBorwser so #Tracking and #Ads are pointless!

Because it is @mozilla #Firefox but with #uBlockOrigin, #HTTPSeverywhere and #NoScript already integrated and working fine...

@workingclassgames or even better: Use @torproject #TorBorwser so #Tracking and #Ads are pointless!

Because it is @mozilla #Firefox but with #uBlockOrigin, #HTTPSeverywhere and #NoScript already integrated and working fine...

Recommened Firefox/Chrome Add-ons

#decentraleyes #ublockorigin #httpseverywhere #privacybadger #noscript #firefox #Fennec #google #chrome #ublock #web #browser

Recommened Firefox/Chrome Add-ons

#decentraleyes #ublockorigin #httpseverywhere #privacybadger #noscript #firefox #Fennec #google #chrome #ublock #web #browser

Recommened Firefox/Chrome Add-ons

#decentraleyes #ublockorigin #httpseverywhere #privacybadger #noscript #firefox #Fennec #google #chrome #ublock #web #browser

Recommened Firefox/Chrome Add-ons

#decentraleyes #ublockorigin #httpseverywhere #privacybadger #noscript #firefox #Fennec #google #chrome #ublock #web #browser

Recommened Firefox/Chrome Add-ons

#decentraleyes #ublockorigin #httpseverywhere #privacybadger #noscript #firefox #Fennec #google #chrome #ublock #web #browser

I wonder how many companies have gone out of business simply because they didn't use https for their websites.

#httpseverywhere

I wonder how many companies have gone out of business simply because they didn't use https for their websites.

#httpseverywhere

I wonder how many companies have gone out of business simply because they didn't use https for their websites.

#httpseverywhere

I wonder how many companies have gone out of business simply because they didn't use https for their websites.

#httpseverywhere

I wonder how many companies have gone out of business simply because they didn't use https for their websites.

#httpseverywhere

DYN that by default #Azure #functions do not enforce #HTTPS only? Rather you must configure HTTP to redirect to HTTPS.

Also, interestingly enough I found this factoid in an Azure Docs section on VNet integration.

#httpseverywhere #appsec #security #cybersecurity #cloudsecurity

DYN that by default #Azure #functions do not enforce #HTTPS only? Rather you must configure HTTP to redirect to HTTPS.

Also, interestingly enough I found this factoid in an Azure Docs section on VNet integration.

#httpseverywhere #appsec #security #cybersecurity #cloudsecurity

@questionable_ole #uBlockOrigin is a must, and I'll also shill for #NoScript, #HTTPSEverywhere, and #Bitwarden. #FacebookContainer is also good if you use #Meta services.

Setting up #mastodon has gotten me to get my #email working. I've kinda been procrastination about it.

I've got everything working fine until I got to #dovecot it's saying my #ssl #certificate is bad. It's a #httpseverywhere cert, so it should be good. Works on my browser.

Help?

Setting up #mastodon has gotten me to get my #email working. I've kinda been procrastination about it.

I've got everything working fine until I got to #dovecot it's saying my #ssl #certificate is bad. It's a #httpseverywhere cert, so it should be good. Works on my browser.

Help?

La morte di Peter Eckersley, il fondatore di Let's Encrypt, ha sconvolto gli informatici di tutto il mondo

https://poliverso.org/display/0477a01e-1563-135b-73bf-c39316965916

La morte di Peter Eckersley, il fondatore di Let's Encrypt, ha sconvolto gli informatici di tutto il mondo

https://poliverso.org/display/0477a01e-1563-135b-73bf-c39316965916

La morte di Peter Eckersley, il fondatore di Let's Encrypt, ha sconvolto gli informatici di tutto il mondo

https://poliverso.org/display/0477a01e-1563-135b-73bf-c39316965916

#EFF: #HTTPSEverywhere wird nicht mehr gebraucht
https://www.golem.de/news/eff-https-everywhere-wird-nicht-mehr-gebraucht-2109-159883.html

#DecentralEyes pretends to improve the privacy by replacing some common JS libraries served through CDNs with locally stored copies. Not really sure how important the effect is (e.g. what fraction of all CDN requests is blocked this way), but it never broke any site for me, hence why not?

#HTTPSEverywhere ensures that all sites supporting SSL connection do actually use it. A few years ago I took care to write the rules for my favorite sites myself. Now everything works mostly out of box.

#DecentralEyes pretends to improve the privacy by replacing some common JS libraries served through CDNs with locally stored copies. Not really sure how important the effect is (e.g. what fraction of all CDN requests is blocked this way), but it never broke any site for me, hence why not?

#HTTPSEverywhere ensures that all sites supporting SSL connection do actually use it. A few years ago I took care to write the rules for my favorite sites myself. Now everything works mostly out of box.

@lauteshirn

Auf dem Handy habe ich browserunabhängig #Blokada, #Warden, #UntrackMe und #AFWall.

In Fennec #ublockorigin, #httpseverywhere, #decentraleyes und #bitwarden.

Die Geräte von Frau und K1 sind genauso eingerichtet.

Eine Zeitlang hatte ich noch #Shelter am laufen aber das hat irgendwann Probleme verursacht... Ich weiß nur leider nicht mehr, welche. :-/

@lauteshirn

Auf dem Handy habe ich browserunabhängig #Blokada, #Warden, #UntrackMe und #AFWall.

In Fennec #ublockorigin, #httpseverywhere, #decentraleyes und #bitwarden.

Die Geräte von Frau und K1 sind genauso eingerichtet.

Eine Zeitlang hatte ich noch #Shelter am laufen aber das hat irgendwann Probleme verursacht... Ich weiß nur leider nicht mehr, welche. :-/

@tinyrabbit @downey ATM I see that #HTTPSEverywhere hogs ~102mb RAM, WTF. /cc @eff

@tinyrabbit @downey ATM I see that #HTTPSEverywhere hogs ~102mb RAM, WTF. /cc @eff