Opened 4 years ago

Closed 4 years ago

#13423 closed defect (wontfix)

Cannot use HTTPS for amazon.com

Reported by: cypherpunks Owned by: zyan
Priority: High Milestone:
Component: HTTPS Everywhere/EFF-HTTPS Everywhere Version:
Severity: Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

Some of the images appear to be HTTPS'd but not the rest even with all the rules toggled.

Child Tickets

Change History (2)

comment:1 Changed 4 years ago by teor

This is a known issue:

	This rule is off by default because it caused so many aspects of the
	Amazon site to break; see the mailing list archives for details.
	Currently being fixed...

	Amazon appears to operate in 7 countries, and does not hold the domains
	for some others, like .se or .be.  In other cases there is an http-only site
	that redirects to one of these 7 countries.


	amazon.com:

		Does work:

			- ap/		(appears to be purchase-management related)
			- ([\w-]+/)?dp/	(i.e. dp/ possibly preceeded by title)
			- e/\w{10,10}/	(i.e. e/ followed by ASIN)
			- gp/cart
			- gp/css
			- gp/feature.html
			- gp/redirect.html
			- gp/registry/wishlist

		Doesn't work:

			- $			(i.e. homepage)
			- ([\w-]+/)?b/	 	(i.e. b/ preceeded by category)
			- exec/obidos/ASIN/
			- ([\w-]+/)gp/		(i.e. gp/ possibly preceeded by title)
			- gp/goldbox($|\?)
			- gp/kindle/pc($|\?)
			- gp/pdp/profile($|\?)
			- gp/product/
			- gp/richpub/syltguides/byauthor($|\?)
			- Help/
			- l/
			- s/


	amazon.cn:

		Doesn't work:

			- Everything?

	amazon.ca:

		Does work:

			everything except...

		Doesn't work:

			/mn/search/
				

	Partially covered domains:

		- askville.amazon.com	(pages redirect to SendToHttp.do)

-->
<ruleset name="Amazon (broken)" default_off="breaks Look Inside the Book">

comment:2 Changed 4 years ago by jsha

Resolution: wontfix
Status: newclosed
Note: See TracTickets for help on using tickets.