Bitcoin Forum

Hi guys,

I guess most of you know the Firefox addon HTTPS Everywhere (https://www.eff.org/https-everywhere) by the EFF.
If you don`t know it yet, make sure to check it out, it`s awesome.

EDIT: http://rapidshare.com/files/442718684/HTTPSEverywhereUserRules.zip (http://rapidshare.com/files/442718684/HTTPSEverywhereUserRules.zip) (check my other posts in this thread for the newest version)

This file contains rules for:

bitcoin.org
bitcoin2cash.com
bitcoin2cc.com
bitcoin4cash.com
bitcoinmarket.com
mtgox.com
mullvad.net
mybitcoin.com
privacyshark.com

Just install HTTPS Everywhere and extract the zip to your HTTPSEverywhereUserRules folder.
Example for Windows 7:
C:\Users\~USER~\AppData\Roaming\Mozilla\Firefox\Profiles\~PROFILE~\HTTPSEverywhereUserRules\

If you want other sites to be added feel free to ask here.


Have fun !
(and if you like that, you could send me some bitcoins :P see the sig for the address)





Well, I tried to write my own rulesets for several bitcoin related sites.

(also for bitcoinmarket, bitcoin2cash, bitcoin4cash, bitcoin2cc, mtgox, mullvad, mybitcoin and privacyshark)

I put it into the HTTPSEverywhereUserRules folder but somehow it doesn`t work.

Any idea ?

Send upstream for inclusion in the plugin?

according to this https://www.eff.org/https-everywhere/rulesets (https://www.eff.org/https-everywhere/rulesets) you don't need to upload it to the git.

just putting them in the userrules folder should work, but somehow it doesn't.

Yay, got it to work !
Feel free to download.

Could you please include https://bitcoinbonus.com

Thanks,
  --Darrell

Hmm, seems like the site autmatically forwards http requests(port 80) to https.
Also seems like encryption isn't working on the whole site, somehow that doesnt make sense (to me).

yup, I'm trying to figure it out myself.  Not sure what Drupal is doing.

A number of your rules have extra slash at end of the to= string. This leads to 404 when going to e.g. (bitcoin2cc.com/faq.php).

I have fixed that. Other changes:
* Forced www.bitcoin.org instead of just bitcoin.org. The certificate is self-signed for the www domain, and forcing it wrongly prevents me from using Perspectives (https://www.cs.cmu.edu/~perspectives/) to bypass the warning.
* Removed targethost vekja.net from Mullvad rule. It is already always HTTPS.
* Added targethost mullvad.net to Mullvad rule. It is a valid target but not included.
* Cosmetic changes to better follow EFF rules.

I have done a bare minimum of testing on these rules and they all work for the frontpages.

Here are new rules, .7z:
https://sovietpride.su/stf/lgbtf/HTEv2.7z
^{sha256: a196848a0e5768843d6b8fb80cf43144cf00d68a36f7e4700ec82aee195a6d54
md5: 9cb3250df1f3f36170191ea81de49a71}
or in .tar.xz
https://sovietpride.su/stf/lgbtf/HTEv2.tar.xz
^{sha256: ea469b0c50d8d6f5469b22fbdf35b4315f9da8b60ea489996907b6eaf7b32aa0
md5: e7a69d10b18fb251cf42fc17d9b232ad}


More people should be using HTTPSEverywhere.
// Perspectives (https://www.cs.cmu.edu/~perspectives/) is also nice if you don't mind it sending certain hosts to their servers (via https) to check on its certificate status. I have mine set to paranoid settings: check all HTTPS, not just unsigned; 75% agreement; certificate has been seen consistently for 7 days.

Certain images are served via HTTP, thus causing a minor security issue. Browsers flag this. View the source and search for "src="http://" to see.

PS: Easier way to find Firefox profile on Windows is just to paste "%appdata%\Mozilla\Firefox\Profiles" into Explorer and hit enter.

Thanks Vasilev!

I was aware of some mistakes but I was too lazy to fix them and the community didn't repsond very much to this.

added support for:
 - Slushs pool site mining.bitcoin.cz
 - Bitcoin Faucet freebitcoins.appspot.com
 - alloscomp.com


Download:
http://stm.square7.ch/files/rules-v3.zip (http://stm.square7.ch/files/rules-v3.zip)

new version below.

Thanx, SmokeTooMuch

I added thepiratebay to your list. Hope you don't mind

https://rapidshare.com/files/458673279/Archive.zip (https://rapidshare.com/files/458673279/Archive.zip)

Attention: Do not use my rulesets until the next update !
Due to the recent changes to the bitcoin.org site the site and forum are NOT reachable when my ruleset is enabled.

I will try to update the set later that day.

Update

- removed support for bitcoin.org main page (has no SSL support anymore)
- added support for the bitcoin.org forum (forum.bitcoin.org still has SSL)

Link:
http://stm.square7.ch/files/rules-v4.zip (http://stm.square7.ch/files/rules-v4.zip)

new version below.

Thank you!

Try adding deepbit.net too.

Done.

Update

- renamed bitcoin.xml to forum.bitcoin.org.xml
- added support for deepbit.net

Link:
http://stm.square7.ch/files/rules-v5.zip (http://stm.square7.ch/files/rules-v5.zip)

Updated ruleset that works for old bitcoin.org/smf/ related links also!

Version 0.6

http://www.bitcoinservice.co.uk/files/875

File is free... just refresh the page.

as long as no issued/signed SSL certificate for bitcoin.org [who trust unsigned/self-signed ? and what for ?] what point in it ?

p.s.
sorry for [probably]stupid qustion.

Connection is encrypted either way, so your ISP does not know what you are doing here.

Thanks ;)

Hm, my mining.bitcoin.cz rule seems to be wrong, buit I can't see the mistake.
Can anybody please check that ?

It works! 
Thanks OP   :D

We need a update of these rules... hmm maybe i'll do it.  :D

I can recommend https://addons.mozilla.org/de/firefox/addon/https-finder/ as addition to HTTPS Everywhere.
HTTPS Finder automatically checks for https availability and can create a ruleset for HTTPS Everywhere if desired.