[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #8664 [EFF-HTTPS Everywhere]: Firefox 23 blocks loading of HTTPS/HTTP mixed content, breaking nytimes.com
#8664: Firefox 23 blocks loading of HTTPS/HTTP mixed content, breaking nytimes.com
----------------------------------+-----------------------------------------
Reporter: cypherpunks | Owner: pde
Type: defect | Status: new
Priority: normal | Milestone:
Component: EFF-HTTPS Everywhere | Version: HTTPS-E 3.1.4
Keywords: | Parent:
Points: | Actualpoints:
----------------------------------+-----------------------------------------
Comment(by pde):
We've already made [https://trac.torproject.org/projects/tor/ticket/6975
some attempts] to flag all the rulesets that create mixed content
situations for the Chrome port, where the mixed content is blocked by
default and Google
[https://code.google.com/p/chromium/issues/detail?id=144637 refused] to
give us a way to override that or even give the user a better UI for doing
so.
(In Google's defense there are some rare cases where forcing HTTPS and
allowing mixed content is worse than not forcing HTTPS at all; they would
apply to the very rare sites that actually have a secure HTTPS deployment
for part of their site and HTTP for the rest of the site).
Despite that I think on balance we're probably better allowing mixed
content in pages that we forced to be HTTPS in the first place. But the
alternative is to expand and improve the list of "mixedcontent" rules, and
disable them all by default in Firefox.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8664#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs