[tor-bugs] #7575 [EFF-HTTPS Everywhere]: WebAssign site produces litany of "Security Warning" alerts
    Tor Bug Tracker & Wiki 
    blackhole at torproject.org
       
    Thu Nov 29 22:20:14 UTC 2012
    
    
  
#7575: WebAssign site produces litany of "Security Warning" alerts
----------------------------------+-----------------------------------------
 Reporter:  cypherpunks           |          Owner:  pde
     Type:  defect                |         Status:  new
 Priority:  normal                |      Milestone:     
Component:  EFF-HTTPS Everywhere  |        Version:     
 Keywords:                        |         Parent:     
   Points:                        |   Actualpoints:     
----------------------------------+-----------------------------------------
Comment(by cypherpunks):
 To add a little, the warning is happening due to a giant form on
 webassign.net's site that uses an absolute http URL to POST to that then
 gets converted to https by HTTPS Everywhere. This conversion must take
 place after the Firefox logic that detects posting to a non-https URL from
 an https one.
 Is there a way for HTTPS Everywhere to rewrite the URL before the Firefox
 posting logic sees it in order to rid ourselves of this error?
-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7575#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
    
    
More information about the tor-bugs
mailing list