Opened 9 years ago

Closed 9 years ago

#4399 closed defect (fixed)

help.duckduckgo.com shouldnt be forced to https by HTTPS Everywhere

Reported by: Getty Owned by: pde
Priority: Medium Milestone:
Component: HTTPS Everywhere/EFF-HTTPS Everywhere Version:
Severity: Keywords:
Cc: torsten@… Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

We on DuckDuckGo added a new helpsite on http://help.duckduckgo.com/ it is not proper reachable via https://help.duckduckgo.com/ which gives us right now bug reports, a user gave us this hint http://www.reddit.com/r/duckduckgo/comments/lweg1/dear_redditors_take_the_duckduckgo_challenge_if/c2x9pn0 to solve it which is probably right, sadly i dont use HTTPS Everywhere and can't tell. Would it be possible that we fix this situation and help.duckduckgo.com gets not forced to https?

Thanks in advance :)

Child Tickets

Change History (3)

comment:1 Changed 9 years ago by Getty

Cc: torsten@… added

comment:2 Changed 9 years ago by Anna

I've been trying to learn rulesets and as I understand it, that sort of problem should just need an exclusion line added in the site rule so I was going to give it a shot but there's something strange going on here that I don't really understand. Here's what I found trying to recreate the problem:

  1. When I visit the help page which appears to be http, the browser and Perspectives both register a certificate for *assistly.com (which looks like the website support company and the page loads a couple of images from them, possibly more) and neither the browser nor Perspectives likes that certificate. If that's the problem the user is encountering, that's not a problem with https-everywhere.


  1. Beyond the security certificate problem, the addon doesn't appear to attempt to forward me to https and when I type https manually, it manages to forward me to http without a redirect loop and I can access the content just fine.

comment:3 Changed 9 years ago by pde

Resolution: fixed
Status: newclosed

Fixed in git master and stable:

https://gitweb.torproject.org/https-everywhere.git/commitdiff/018313b1160c62da495c47b0b15110bd8641ea00

https://gitweb.torproject.org/https-everywhere.git/commitdiff/33c7bfa3b939736e98a50232feddb835a7c753ef

Releases coming soon.

Note: See TracTickets for help on using tickets.