Hacker News Reader

Comment by AntiImperialist | Hacker News Reader

I have been using HTTPS Everywhere for many years: https://www.eff.org/https-everywhere

Reading the docs (and my memory) HTTPS Everywhere works based on a predefined list of sites that should be upgraded.

The nice thing about the new Firefox feature is that the browser won't make any insecure connections unless I explicitly allow it.

Yes, but one less extension with access to all your history, passwords and all other info.

I'm not sure if I trust EFF any less than I trust Mozilla.

I am the same but in this case it is about trusting (EFF and Mozilla) more than Mozilla. You have to trust Mozilla either way.

I already trust Mozilla with everything. I do everything on my browser. It is always better to reduce extensions. I look forward to a day when I have nothing but uBlock Origin in my browser

WebExtensions have permissions and I doubt the EFF requests passwords and history for this extension. It’s also open-source, and although installing it from addons.mozilla.org could introduce some sort of MITM opportunity, as a recommended extension Mozilla puts it through a review process, so it’s about as tame as an extension this capable can get. But yes, it is always nice to reduce extensions installed.

I have been using HTTPS Everywhere since forever. Here are the permissions required:

* Access browser tabs

* Access browser activity during navigation

* Access your data for all websites

So can be pretty devastating if it went rogue, which I doubt.

Passwords come under 'access all sites', which HTTPs everywhere needs.

Reply on news.ycombinator.com