Bitcoin Forum
December 08, 2016, 04:04:41 PM *
News: To be able to use the next phase of the beta forum software, please ensure that your email address is correct/functional.
 
   Home   Help Search Donate Login Register  
Pages: [1] 2 »  All
  Print  
Author Topic: HTTPS Everywhere - Rulesets for bitcoin.org etc.  (Read 8676 times)
SmokeTooMuch
Legendary
*
Offline Offline

Activity: 873


View Profile
January 15, 2011, 09:09:09 AM
 #1

Hi guys,

I guess most of you know the Firefox addon HTTPS Everywhere by the EFF.
If you don`t know it yet, make sure to check it out, it`s awesome.

EDIT: http://rapidshare.com/files/442718684/HTTPSEverywhereUserRules.zip (check my other posts in this thread for the newest version)

This file contains rules for:

bitcoin.org
bitcoin2cash.com
bitcoin2cc.com
bitcoin4cash.com
bitcoinmarket.com
mtgox.com
mullvad.net
mybitcoin.com
privacyshark.com

Just install HTTPS Everywhere and extract the zip to your HTTPSEverywhereUserRules folder.
Example for Windows 7:
C:\Users\~USER~\AppData\Roaming\Mozilla\Firefox\Profiles\~PROFILE~\HTTPSEverywhereUserRules\

If you want other sites to be added feel free to ask here.


Have fun !
(and if you like that, you could send me some bitcoins Tongue see the sig for the address)





Well, I tried to write my own rulesets for several bitcoin related sites.

Quote

bitcoin.org.xml:

<ruleset name="bitcoin.org">
   <target host="www.bitcoin.org" />

   <rule from="^http://(www\.)?bitcoin\.org/" to="https://www.bitcoin.org/"/>
</ruleset>

(also for bitcoinmarket, bitcoin2cash, bitcoin4cash, bitcoin2cc, mtgox, mullvad, mybitcoin and privacyshark)

I put it into the HTTPSEverywhereUserRules folder but somehow it doesn`t work.

Any idea ?


Date Registered: 2009-12-10 | I'm using GPG, pm me for my public key. | Bitcoin on Reddit: https://www.reddit.com/r/btc
You like what I'm doing? Why don't you send me a coin: 17Pj8jpUgY6qTaKgiopL5U48zxU4rTrkuB
Advertised sites are not endorsed by the Bitcoin Forum. They may be unsafe, untrustworthy, or illegal in your jurisdiction. Advertise here.
1481213081
Hero Member
*
Offline Offline

Posts: 1481213081

View Profile Personal Message (Offline)

Ignore
1481213081
Reply with quote  #2

1481213081
Report to moderator
BioMike
Legendary
*
Offline Offline

Activity: 1257


View Profile
January 15, 2011, 02:27:13 PM
 #2

Send upstream for inclusion in the plugin?
SmokeTooMuch
Legendary
*
Offline Offline

Activity: 873


View Profile
January 15, 2011, 03:49:25 PM
 #3

according to this https://www.eff.org/https-everywhere/rulesets you don't need to upload it to the git.

just putting them in the userrules folder should work, but somehow it doesn't.

Date Registered: 2009-12-10 | I'm using GPG, pm me for my public key. | Bitcoin on Reddit: https://www.reddit.com/r/btc
You like what I'm doing? Why don't you send me a coin: 17Pj8jpUgY6qTaKgiopL5U48zxU4rTrkuB
SmokeTooMuch
Legendary
*
Offline Offline

Activity: 873


View Profile
January 15, 2011, 04:36:52 PM
 #4

Yay, got it to work !
Feel free to download.

Date Registered: 2009-12-10 | I'm using GPG, pm me for my public key. | Bitcoin on Reddit: https://www.reddit.com/r/btc
You like what I'm doing? Why don't you send me a coin: 17Pj8jpUgY6qTaKgiopL5U48zxU4rTrkuB
dduane
Jr. Member
*
Offline Offline

Activity: 47



View Profile WWW
January 24, 2011, 01:07:38 AM
 #5


Could you please include https://bitcoinbonus.com

Thanks,
  --Darrell
SmokeTooMuch
Legendary
*
Offline Offline

Activity: 873


View Profile
January 24, 2011, 03:38:55 PM
 #6


Could you please include https://bitcoinbonus.com

Thanks,
  --Darrell
Hmm, seems like the site autmatically forwards http requests(port 80) to https.
Also seems like encryption isn't working on the whole site, somehow that doesnt make sense (to me).

Date Registered: 2009-12-10 | I'm using GPG, pm me for my public key. | Bitcoin on Reddit: https://www.reddit.com/r/btc
You like what I'm doing? Why don't you send me a coin: 17Pj8jpUgY6qTaKgiopL5U48zxU4rTrkuB
dduane
Jr. Member
*
Offline Offline

Activity: 47



View Profile WWW
February 09, 2011, 03:05:11 PM
 #7

yup, I'm trying to figure it out myself.  Not sure what Drupal is doing.
Vasiliev
Jr. Member
*
Offline Offline

Activity: 55


View Profile
February 15, 2011, 01:10:53 PM
 #8

A number of your rules have extra slash at end of the to= string. This leads to 404 when going to e.g. (bitcoin2cc.com/faq.php).

I have fixed that. Other changes:
* Forced www.bitcoin.org instead of just bitcoin.org. The certificate is self-signed for the www domain, and forcing it wrongly prevents me from using Perspectives to bypass the warning.
* Removed targethost vekja.net from Mullvad rule. It is already always HTTPS.
* Added targethost mullvad.net to Mullvad rule. It is a valid target but not included.
* Cosmetic changes to better follow EFF rules.

I have done a bare minimum of testing on these rules and they all work for the frontpages.

Here are new rules, .7z:
https://sovietpride.su/stf/lgbtf/HTEv2.7z
sha256: a196848a0e5768843d6b8fb80cf43144cf00d68a36f7e4700ec82aee195a6d54
md5: 9cb3250df1f3f36170191ea81de49a71

or in .tar.xz
https://sovietpride.su/stf/lgbtf/HTEv2.tar.xz
sha256: ea469b0c50d8d6f5469b22fbdf35b4315f9da8b60ea489996907b6eaf7b32aa0
md5: e7a69d10b18fb251cf42fc17d9b232ad



More people should be using HTTPSEverywhere.
// Perspectives is also nice if you don't mind it sending certain hosts to their servers (via https) to check on its certificate status. I have mine set to paranoid settings: check all HTTPS, not just unsigned; 75% agreement; certificate has been seen consistently for 7 days.

Also seems like encryption isn't working on the whole site, somehow that doesnt make sense (to me).
Certain images are served via HTTP, thus causing a minor security issue. Browsers flag this. View the source and search for "src="http://" to see.

PS: Easier way to find Firefox profile on Windows is just to paste "%appdata%\Mozilla\Firefox\Profiles" into Explorer and hit enter.

1DiaPwjDV6rLB2KrBA7gzitzSWCJmXnESy
SmokeTooMuch
Legendary
*
Offline Offline

Activity: 873


View Profile
February 16, 2011, 11:26:16 AM
 #9

Thanks Vasilev!

I was aware of some mistakes but I was too lazy to fix them and the community didn't repsond very much to this.

Date Registered: 2009-12-10 | I'm using GPG, pm me for my public key. | Bitcoin on Reddit: https://www.reddit.com/r/btc
You like what I'm doing? Why don't you send me a coin: 17Pj8jpUgY6qTaKgiopL5U48zxU4rTrkuB
SmokeTooMuch
Legendary
*
Offline Offline

Activity: 873


View Profile
March 11, 2011, 06:18:29 AM
 #10

added support for:
 - Slushs pool site mining.bitcoin.cz
 - Bitcoin Faucet freebitcoins.appspot.com
 - alloscomp.com


Download:
http://stm.square7.ch/files/rules-v3.zip


new version below.

Date Registered: 2009-12-10 | I'm using GPG, pm me for my public key. | Bitcoin on Reddit: https://www.reddit.com/r/btc
You like what I'm doing? Why don't you send me a coin: 17Pj8jpUgY6qTaKgiopL5U48zxU4rTrkuB
mewantsbitcoins
Full Member
***
Offline Offline

Activity: 126


View Profile
April 22, 2011, 04:42:53 PM
 #11

Thanx, SmokeTooMuch

I added thepiratebay to your list. Hope you don't mind

https://rapidshare.com/files/458673279/Archive.zip
SmokeTooMuch
Legendary
*
Offline Offline

Activity: 873


View Profile
May 19, 2011, 08:06:56 AM
 #12

Attention: Do not use my rulesets until the next update !
Due to the recent changes to the bitcoin.org site the site and forum are NOT reachable when my ruleset is enabled.

I will try to update the set later that day.

Date Registered: 2009-12-10 | I'm using GPG, pm me for my public key. | Bitcoin on Reddit: https://www.reddit.com/r/btc
You like what I'm doing? Why don't you send me a coin: 17Pj8jpUgY6qTaKgiopL5U48zxU4rTrkuB
SmokeTooMuch
Legendary
*
Offline Offline

Activity: 873


View Profile
May 20, 2011, 03:40:33 PM
 #13

Update

- removed support for bitcoin.org main page (has no SSL support anymore)
- added support for the bitcoin.org forum (forum.bitcoin.org still has SSL)

Link:
http://stm.square7.ch/files/rules-v4.zip


new version below.

Date Registered: 2009-12-10 | I'm using GPG, pm me for my public key. | Bitcoin on Reddit: https://www.reddit.com/r/btc
You like what I'm doing? Why don't you send me a coin: 17Pj8jpUgY6qTaKgiopL5U48zxU4rTrkuB
wumpus
Hero Member
*****
Offline Offline

Activity: 798

No Maps for These Territories


View Profile
May 20, 2011, 05:24:23 PM
 #14

Thank you!

Bitcoin Core developer [PGP] Warning: For most, coin loss is a larger risk than coin theft. A disk can die any time. Regularly back up your wallet through FileBackup Wallet to an external storage or the (encrypted!) cloud. Use a separate offline wallet for storing larger amounts.
[Tycho]
Hero Member
*****
Offline Offline

Activity: 742



View Profile WWW
May 20, 2011, 05:37:01 PM
 #15

Try adding deepbit.net too.

Welcome to my bitcoin mining pool: https://deepbit.net - Both payment schemes (including PPS), instant payout, no invalid blocks !
ICBIT Trading platform : USD/BTC futures trading, Bitcoin difficulty futures (NEW!). Third year in bitcoin business.
SmokeTooMuch
Legendary
*
Offline Offline

Activity: 873


View Profile
May 20, 2011, 10:58:19 PM
 #16

Try adding deepbit.net too.
Done.

Update

- renamed bitcoin.xml to forum.bitcoin.org.xml
- added support for deepbit.net

Link:
http://stm.square7.ch/files/rules-v5.zip

Date Registered: 2009-12-10 | I'm using GPG, pm me for my public key. | Bitcoin on Reddit: https://www.reddit.com/r/btc
You like what I'm doing? Why don't you send me a coin: 17Pj8jpUgY6qTaKgiopL5U48zxU4rTrkuB
da2ce7
Legendary
*
Offline Offline

Activity: 1218


Live and Let Live


View Profile
May 22, 2011, 04:38:50 PM
 #17

Updated ruleset that works for old bitcoin.org/smf/ related links also!

Version 0.6

http://www.bitcoinservice.co.uk/files/875

File is free... just refresh the page.

One off NP-Hard.
Basiley
Jr. Member
*
Offline Offline

Activity: 42


View Profile
May 22, 2011, 06:12:52 PM
 #18

as long as no issued/signed SSL certificate for bitcoin.org [who trust unsigned/self-signed ? and what for ?] what point in it ?

p.s.
sorry for [probably]stupid qustion.
SmokeTooMuch
Legendary
*
Offline Offline

Activity: 873


View Profile
May 22, 2011, 06:35:47 PM
 #19

Connection is encrypted either way, so your ISP does not know what you are doing here.

Updated ruleset that works for old bitcoin.org/smf/ related links also!
http://www.bitcoinservice.co.uk/files/875
Thanks Wink

Date Registered: 2009-12-10 | I'm using GPG, pm me for my public key. | Bitcoin on Reddit: https://www.reddit.com/r/btc
You like what I'm doing? Why don't you send me a coin: 17Pj8jpUgY6qTaKgiopL5U48zxU4rTrkuB
SmokeTooMuch
Legendary
*
Offline Offline

Activity: 873


View Profile
June 28, 2011, 08:51:14 PM
 #20

Hm, my mining.bitcoin.cz rule seems to be wrong, buit I can't see the mistake.
Can anybody please check that ?

Date Registered: 2009-12-10 | I'm using GPG, pm me for my public key. | Bitcoin on Reddit: https://www.reddit.com/r/btc
You like what I'm doing? Why don't you send me a coin: 17Pj8jpUgY6qTaKgiopL5U48zxU4rTrkuB
Pages: [1] 2 »  All
  Print  
 
Jump to:  

Sponsored by , a Bitcoin-accepting VPN.
Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!