Re: [ANN] https at www.lua.org

[Coda Highland <chighland@...>]

On Tue, Mar 15, 2016 at 4:14 PM, Jonathan Goble <jcgoble3@gmail.com> wrote:
> On Tue, Mar 15, 2016 at 4:05 PM, Paul Merrell <marbux@gmail.com> wrote:
>> On Tue, Mar 15, 2016 at 12:36 PM, Jonathan Goble <jcgoble3@gmail.com> wrote:
>>
>>> Awesome! Everything is working on my end, with no need to manually
>>> accept a certificate. I've changed all of my bookmarks over to use
>>> HTTPS.
>>
>> Kudos on the change. But you don't need to change bookmarks if you use
>> the HTTPS Everywhere browser extension by the Electronic Frontier
>> Foundation and the TOR Foundation.
>> <https://www.eff.org/Https-everywhere>. Available for Chrome, Opera,
>> Firefox, and Firefox for Android.
>>
>> Given an HTTP URL, the extension queries each site to see if an HTTPS
>> connection is available instead, and if available cancels the HTTP
>> request and issues an HTTPS request instead. In my experience, the
>> extra delay is negligible.
>>
>> HTTPS Everywhere is a companion project to Let's Encrypt, a free
>> certificate authority that aims to make conversion to SSL a one click
>> experience for web masters. <https://letsencrypt.org/about/>.
>>
>> Best regards,
>>
>> Paul
>
> Yeah, I'm aware of that. But I'm old-fashioned and prefer doing things
> manually [1] rather than relying on browser extensions. :-P
>
> More specifically, I prefer to have as few extensions as possible
> installed in my browser; if I can do it without installing a new
> extension, then I prefer to not install it.
>
> [1] Even as a so-called millennial [2], I love this song:
> https://www.youtube.com/watch?v=2ksWKOy665o
>
> [2] I hate that term.
>

If the http version 301's to the https version, then bookmarks will be
fine, and Chrome (IIRC) tries to do https before http when inputting a
schemeless URL. (Assuming it hasn't cached which version is active.)

I mean, if the http version were blackholing, that would be another matter.

/s/ Adam