Extras do Firefox
  • Extensões
  • Temas
    • para o Firefox
    • Dicionários e pacotes de idiomas
    • Outros sites de navegadores
    • Extras para Android
Iniciar sessão
Pré-visualização de HTTPZ

HTTPZ por claustromaniac

Fat-free hardenable opportunistic encryption

4.8 (39 reviews)4.8 (39 reviews)
188 Users188 Users
Irá necessitar do Firefox para utilizar esta extensão
Transferir o Firefox e obter a extensão
Transferir ficheiro

Metadados da extensão

Capturas de ecrã
Optional warning page displayed when an attempt to upgrade to HTTPS results in an error. (v0.11.0)Advanced options (v0.11.0)General options (v0.11.0)Page action with pop-up from a Private Browsing window (v0.11.0)Optional page displayed when a server-initiated redirection is intercepted (v0.11.0)
Acerca desta extensão
There are numerous similar extensions out there, but HTTPZ is different because it is not smart: it is Zmart. The following summarizes how it works with the default settings:
  • When you are about to navigate to a site over HTTP, that request is aborted and a new one is started over HTTPS. If that new request results in an error, it is automatically redirected back to HTTP. If navigating to the site over HTTP throws an error too, HTTPZ does nothing more then. Otherwise, that host is added to the list of known insecure sites, and all subsequent requests to it are ignored by the extension for seven days
  • When you navigate to a site over HTTPS by yourself, or because of some external factor (like HSTS preloading), HTTPZ does not do anything to that request, regardless of the outcome.
  • When you navigate to a site over HTTPS and *the server* downgrades the request to HTTP, the extension notices this and allows it. It adds that site to the list of known insecure sites, and does not try to load it over HTTPS for the next seven days

HTTPZ is meant to be unobtrusive and lightweight, it respects your privacy, and is free of trans fats. Additionally, it is very configurable, and should be slightly more secure than some of the alternatives out there, since it has a couple of built-in defenses against SSL-stripping attacks.

It also gets along well with extensions that I recommend for managing contextual identities (containers), such as Containerise and Temporary Containers


Limitations
  • When the initial request over HTTPS results in an error, Firefox starts loading an internal page that describes the error. HTTPZ does not wait for Firefox to finish loading those error pages, it immediately retries the request over HTTP, which causes them to load partially, and it does not look good. This is only a cosmetic issue, and a negligible one at that.
  • Unlike HTTPS Everywhere, this extension does not take care of sub-requests triggered from HTTP-only sites. For now, it outright ignores those requests, because using the same approach with those (retrying on error) is very complicated and has significant drawbacks.

Interested in more recommendations? Head over to the ghacks-user.js GitHub repository. It is an amazing project for hardening Firefox that I have contributed to, and a great source of information (including extension recommendations).


Acknowledgments
HTTPZ would not be what it is if not for its testers' feedback on GitHub.
Rated 4,8 by 39 reviewers
Iniciar sessão para avaliar esta extensão
Não existem avaliações ainda

Avaliação de estrelas guardada

5
36
4
2
3
0
2
0
1
1
Ler todas as 39 análises
Permissions and dataSaber mais

Permissões necessárias:

  • Aceder aos separadores do navegador
  • Aceder aos seus dados para todos os sites

Permissões opcionais:

  • Transferir ficheiros, ler e modificar o histórico de transferências do navegador
Mais informação
Ligações do extra
  • Página inicial
  • Site de apoio
Versão
0.12.0
Tamanho
25,46 KB
Última atualização
há 6 anos (11 de dez de 2019)
Categorias relacionadas
  • Privacidade e segurança
Licença
Apenas a GNU General Public License v3.0
Histórico de versões
  • Ver todas as versões
Adicionar à coleção
Reportar este extra
Notas de lançamento para 0.12.0
Changes in 0.12.0:
  • [enhancement/UX] The page action is now displayed also when the user visits an excluded site over HTTPS. The popup explains the possible reasons for this and offers the opportunity to remove the exclusion
  • [UX] Minor visual and semantic changes here and there

Commits history:
https://github.com/claustromaniac/httpz/compare/0.11.3...0.12.0
Mais extensões por claustromaniac
  • Não existem avaliações ainda

  • Não existem avaliações ainda

  • Não existem avaliações ainda

  • Não existem avaliações ainda

  • Não existem avaliações ainda

  • Não existem avaliações ainda

Ir para a página inicial da Mozilla

Extras

  • Acerca
  • Blogue de extras do Firefox
  • Workshop de extensões
  • Central do programador
  • Políticas de programador
  • Blogue da comunidade
  • Fórum
  • Reportar um erro
  • Guia de análise

Navegadores

  • Desktop
  • Mobile
  • Enterprise

Produtos

  • Browsers
  • VPN
  • Relay
  • Monitor
  • Pocket
  • Bluesky (@firefox.com)
  • Instagram (Firefox)
  • YouTube (firefoxchannel)
  • Privacidade
  • Cookies
  • Informação legal

Exceto onde anotado o contrário, o conteúdo neste site está licenciado sob a licença Creative Commons Atribuição-CompartilhaIgual v3.0 ou qualquer versão mais recente.