Problem with accessing Pinterest on Firefox

[cypherpunks]

Pinterest is a social networking site that allows people to "pin" pictures, drawings, recipes, etc. to their own "Boards." On the Pinterest.com webpage, many of such pinnable items are shown with a menu bar including the option to "Repin It" to your Board. When HTTPS 3.1 is enabled for Pinterest, the RepinIt button starts that action but then spins endlessly without doing anything. Disabling HTTPS Everywhere 3.1 for Pinterest in the options section allows the actions to succeed. This has been a major source of concern for Pinterest aficionados.

[hugosa]

pinterest bug

[hugosa]

Same problem on chrome!

[pde]

I cannot do any research on this bug because Pinterest is blocking me from creating test accounts. Thanks guys. Unfortunately your site is going to remain broken for millions of HTTPS Everywhere users unless we can debug what's going on here.

[pde]

MB thought this might be an HTTPS-E internal issue, but I'm not yet persuaded. I was finally able to make a Pintest account, and I see this with Live HTTP Headers:

{{{---------------------------------------------------------
​https://pinterest.com/board/create/

GET /board/create/ HTTP/1.1
Host: pinterest.com
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:18.0) Gecko/20100101 Firefox/18.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Cookie: component=None; _pinterest_sess="eJw1jEELgjAblahblahblah+etbhw7v8uC9mhcsS8+hosaoR0n6arjGB8PbC0EnIddBj9IhymhEt+STYxXDgtBOTNrKnw5hUwFgFdDCayed0y0iXbNSe7PcNgu1VQhdqbnNNOAmgs5TV37HDcdJQNS/69/C3N0k5tEgoo96Nzs5Cr8DnO5z9lqAFRGw5wZbswJLgi904kAE"; viewParameter=FEED_FOLLOWING; element=None; csrftoken=88ci4MudZnkblahblahhVImoeJ; viewType=FEED; utma=229774877.1521887585.1357844857.1357844857.1357844857.1; utmb=229774877.3.10.1357844857; utmc=229774877; utmz=229774877.1357844857.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); utmv=229774877.|2=page_name=board_follow=1
Connection: keep-alive

HTTP/1.1 404 NOT FOUND
Accept-Ranges: bytes
Age: 0
Breed: CORGI
Content-Encoding: gzip
Content-Type: text/html; charset=utf-8
Date: Thu, 10 Jan 2013 19:11:20 GMT
Etag: "1a495a8d89d16df2efec2236a225a633;gzip"
Generated_by: ngapp203
Server: nginx/0.8.54
Vary: Cookie, Accept-Encoding
Version: 8c431bf3f2663f5a68d93f53d50113050794d527
Via: 1.1 varnish
X-Varnish: 2116937637
Content-Length: 898
Connection: keep-alive}}}

I'm disabling the ruleset now.

[pde]

This should have been fixed with HTTPS Everywhere 3.1.3, which disabled the Pinterest ruleset.