- 2011-9-8 0:16
- 短网址
- 字号
-
HTTPS-finder扩展强制Firefox加密浏览v0.86
HTTPS Finder是一个firefox浏览器扩展，这个插件的作用就是发现网站支持https连接时提醒你并设置成自动换到https加密连接，与前文介绍的HTTPS everywhere扩展功能基本相同，HTTPS Finder还可以为https everywhere自动添加https浏览规则，这对于国内复杂的网络环境还是有一点用的
在这里可以看到更多的支持FF4的插件 https://linux.softpedia.com/get/Internet/Firefox-Extensions/
官方项目主页：https://code.google.com/p/https-finder/
firefox官方插件下载页：https://addons.mozilla.org/en-us/firefox/addon/https-finder/
2012-3-2 更新 v0.86，官方下载：
安全提醒：
1、因为HTTPS Finder强制https加密访问时，是在探测http非加密某个网页之后，所以，在ssl加密之前传送的cookie可能还是非加密的http，这就可能不能防止Firesheep或中间人攻击，不过扩展还是最大限度地减少这种情况发生的机会。
2、HTTPS Finder对HTTPS的搜索只检测具有良好的有效证书者，并不能保证在服务器端实现安全的SSL。
最好的使用方法：
HTTPS Finder是最强大的使用方法就是与HTTPS everywhere配合使用。如果单独使用也可以，有它总比没有好。
类似功能的扩展还有：
https://addons.mozilla.org/zh-CN/firefox/addon/force-tls/
原文链接：https://allinfa.com/https-finder.html
原文标题：HTTPS-finder扩展强制Firefox加密浏览v0.86 - 美博园
美博园文章均为“原创 - 首发”，请尊重辛劳撰写，转载请以上面完整链接注明来源！
软件版权归原作者！个别转载文，本站会注明为转载。
原文标题：HTTPS-finder扩展强制Firefox加密浏览v0.86 - 美博园
美博园文章均为“原创 - 首发”，请尊重辛劳撰写，转载请以上面完整链接注明来源！
软件版权归原作者！个别转载文，本站会注明为转载。
域名被墙的3种状态：后文 »
关注更多相关文章：
网 友 留 言
11条评论 in “HTTPS-finder扩展强制Firefox加密浏览v0.86”这里是你留言评论的地方
Uploaded: Mar 1 (3 days ago)
https://code.google.com/p/https-finder/downloads/detail?name=httpsfinder086.xpi&can=2&q=
"File:
httpsfinder086.xpi 71.7 KB
Description:
-- Fixed issue 42: No Ok/cancel buttons to exit preference window (bug affected OS X only).
SHA1 Checksum: b2070de9f6532da7b0f74adfcbc88d56b43e6c8b What's this?"
https://code.google.com/p/https-finder/downloads/list
"httpsfinder081d1.xpi HTTPS Finder 0.81d1 3 days ago 3 days ago 67.5 KB "
https://code.google.com/p/https-finder/downloads/detail?name=httpsfinder081d1.xpi&can=2&q=
"File:
httpsfinder081d1.xpi 67.5 KB
Description:
Development build: Tested in Win7 x64 and Ubuntu 11.10 x64
Compatibility: Firefox 4.0-11.0a2
Changes since 0.80d2:
-- Fixed bug where whitelisted domains could be removed from whitelist during runtime.
-- Fixed bug where Preference window Enable/Disable toggle would not re-enable correctly all the time.
-- **Feedback requested:** Added feature to set secure cookie flags on valid HTTPS domain cookies. Disabled by default, enable in Preferences > Advanced > "Secure cookies for valid HTTPS domains". Only works on cookies for the exact detected domain (e.g. ".domain.com" cookies are not secured for detected "https://www.domain.com"). Clicking the "Add to whitelist" or "Not Now" button on the alert drop down restores secured cookies to their original insecure state. I'm not sure if this feature will cause problems/unexpected behavior, nor is it perfect since we can't apply an aggressive securing policy to all domains. I'm very interested in feedback on this feature: email httpsfinder@gmail.com "
https://code.google.com/p/https-finder/downloads/list
"httpsfinder080d2.xpi HTTPS Finder 0.80d2 Dec 7 Dec 7 68.0 KB "
https://code.google.com/p/https-finder/downloads/detail?name=httpsfinder079dev3.xpi&can=2&q=
" httpsfinder079dev3.xpi 69.7 KB
Description:
Development build:
Compatibility: Firefox 4.0-9.0a2
Changes since 0.78:
-- Fixed improper character encoding in zh-CN locale (bug introduced in 0.78dev)
-- Added hidden pref to alert when a self-signed certificate is present. I've had multiple requests, but it will most likely remain a hidden setting since most people probably shouldn't use it. Go to about:config, and enable "extensions.httpsfinder.allowSelfSignedCerts". Auto-enforce won't happen since it would degrade experience (cert errors), but a special alert will appear, allowing you to go to HTTPS or whitelist.
The alert string is only in English for now - will get it translated before next release."
更新了，谢谢
https://code.google.com/p/https-finder/downloads/list
"https_finder-0.77-fx.xpi HTTPS Finder 0.77 Featured 9 hours ago 9 hours ago 69.0 KB "
New ver.: httpsfinder 076.xpi :
https://code.google.com/p/https-finder/downloads/detail?name=httpsfinder076.xpi&can=2&q=
https://addons.mozilla.org/en-US/firefox/addon/force-tls/
"Force-TLS allows web sites to tell Firefox that they should be served via HTTPS in the future; this helps secure you from accidentally negotiating an insecure session with certain sites. Force-TLS is also compatible with Strict Transport Security."
"ForceTLS is an adaptation of the ForceHTTPS protocol by Collin Jackson and Adam Barth, which supports a simple HTTP header in forcing automatic connections to HTTPS connections in the future. Here's how it works:
1. A site x.com served via HTTPS provides a Strict-Transport-Security HTTP header in its response. The header contains a max-age value (how long to remember the forced security) and optionally an includeSubDomains flag.
2. The browser receives this header and adds it to a Force TLS database.
3. In the future, any requests to x.com are modified to be via HTTPS if they are attempted through HTTP before the request hits the network.
4. If any subdomains *.x.com are requested via HTTP and the includeSubDomains flag was set, they are also forced to be HTTPS.
Use this add-on to extend Firefox so that it will listen to Strict-Transport-Security suggestions from web servers. This add-on will enforce secure connections for sites that use the Strict-Transport-Security header.
You can also use the add-on to add your own forcing rules -- to be sure you always visit your favorite sites over HTTPS."
https://code.google.com/p/force-tls/
https://forcetls.sidstamm.com/