HTTPS Everywhere - Rulesets for bitcoin.org etc.

[SmokeTooMuch]

Hi guys,

I guess most of you know the Firefox addon HTTPS Everywhere by the EFF.
If you don`t know it yet, make sure to check it out, it`s awesome.

EDIT: http://rapidshare.com/files/442718684/HTTPSEverywhereUserRules.zip (check my other posts in this thread for the newest version)

This file contains rules for:

bitcoin.org
bitcoin2cash.com
bitcoin2cc.com
bitcoin4cash.com
bitcoinmarket.com
mtgox.com
mullvad.net
mybitcoin.com
privacyshark.com

Just install HTTPS Everywhere and extract the zip to your HTTPSEverywhereUserRules folder.
Example for Windows 7:
C:\Users\~USER~\AppData\Roaming\Mozilla\Firefox\Profiles\~PROFILE~\HTTPSEverywhereUserRules\

If you want other sites to be added feel free to ask here.


Have fun !
(and if you like that, you could send me some bitcoins see the sig for the address)





Well, I tried to write my own rulesets for several bitcoin related sites.

bitcoin.org.xml:

<ruleset name="bitcoin.org">
   <target host="www.bitcoin.org" />

   <rule from="^http://(www\.)?bitcoin\.org/" to="https://www.bitcoin.org/"/>
</ruleset>

(also for bitcoinmarket, bitcoin2cash, bitcoin4cash, bitcoin2cc, mtgox, mullvad, mybitcoin and privacyshark)

I put it into the HTTPSEverywhereUserRules folder but somehow it doesn`t work.

Any idea ?

[BioMike]

Send upstream for inclusion in the plugin?

[SmokeTooMuch]

according to this https://www.eff.org/https-everywhere/rulesets you don't need to upload it to the git.

just putting them in the userrules folder should work, but somehow it doesn't.

[SmokeTooMuch]

Yay, got it to work !
Feel free to download.

[dduane]

Could you please include https://bitcoinbonus.com

Thanks,
  --Darrell

[SmokeTooMuch]

Could you please include https://bitcoinbonus.com

Thanks,
  --Darrell

Hmm, seems like the site autmatically forwards http requests(port 80) to https.
Also seems like encryption isn't working on the whole site, somehow that doesnt make sense (to me).

[dduane]

yup, I'm trying to figure it out myself.  Not sure what Drupal is doing.

[Vasiliev]

A number of your rules have extra slash at end of the to= string. This leads to 404 when going to e.g. (bitcoin2cc.com/faq.php).

I have fixed that. Other changes:
* Forced www.bitcoin.org instead of just bitcoin.org. The certificate is self-signed for the www domain, and forcing it wrongly prevents me from using Perspectives to bypass the warning.
* Removed targethost vekja.net from Mullvad rule. It is already always HTTPS.
* Added targethost mullvad.net to Mullvad rule. It is a valid target but not included.
* Cosmetic changes to better follow EFF rules.

I have done a bare minimum of testing on these rules and they all work for the frontpages.

Here are new rules, .7z:
https://sovietpride.su/stf/lgbtf/HTEv2.7z
^{sha256: a196848a0e5768843d6b8fb80cf43144cf00d68a36f7e4700ec82aee195a6d54
md5: 9cb3250df1f3f36170191ea81de49a71}
or in .tar.xz
https://sovietpride.su/stf/lgbtf/HTEv2.tar.xz
^{sha256: ea469b0c50d8d6f5469b22fbdf35b4315f9da8b60ea489996907b6eaf7b32aa0
md5: e7a69d10b18fb251cf42fc17d9b232ad}


More people should be using HTTPSEverywhere.
// Perspectives is also nice if you don't mind it sending certain hosts to their servers (via https) to check on its certificate status. I have mine set to paranoid settings: check all HTTPS, not just unsigned; 75% agreement; certificate has been seen consistently for 7 days.

Also seems like encryption isn't working on the whole site, somehow that doesnt make sense (to me).

Certain images are served via HTTP, thus causing a minor security issue. Browsers flag this. View the source and search for "src="http://" to see.

PS: Easier way to find Firefox profile on Windows is just to paste "%appdata%\Mozilla\Firefox\Profiles" into Explorer and hit enter.

[SmokeTooMuch]

Thanks Vasilev!

I was aware of some mistakes but I was too lazy to fix them and the community didn't repsond very much to this.

[SmokeTooMuch]

added support for:
 - Slushs pool site mining.bitcoin.cz
 - Bitcoin Faucet freebitcoins.appspot.com
 - alloscomp.com


Download:
http://stm.square7.ch/files/rules-v3.zip

new version below.

[mewantsbitcoins]

Thanx, SmokeTooMuch

I added thepiratebay to your list. Hope you don't mind

https://rapidshare.com/files/458673279/Archive.zip

[SmokeTooMuch]

Attention: Do not use my rulesets until the next update !
Due to the recent changes to the bitcoin.org site the site and forum are NOT reachable when my ruleset is enabled.

I will try to update the set later that day.

[SmokeTooMuch]

Update

- removed support for bitcoin.org main page (has no SSL support anymore)
- added support for the bitcoin.org forum (forum.bitcoin.org still has SSL)

Link:
http://stm.square7.ch/files/rules-v4.zip

new version below.

[wumpus]

Thank you!

[[Tycho]]

Try adding deepbit.net too.

[SmokeTooMuch]

Try adding deepbit.net too.

Done.

Update

- renamed bitcoin.xml to forum.bitcoin.org.xml
- added support for deepbit.net

Link:
http://stm.square7.ch/files/rules-v5.zip

[da2ce7]

Updated ruleset that works for old bitcoin.org/smf/ related links also!

Version 0.6

http://www.bitcoinservice.co.uk/files/875

File is free... just refresh the page.

[Basiley]

as long as no issued/signed SSL certificate for bitcoin.org [who trust unsigned/self-signed ? and what for ?] what point in it ?

p.s.
sorry for [probably]stupid qustion.

[SmokeTooMuch]

Connection is encrypted either way, so your ISP does not know what you are doing here.

Updated ruleset that works for old bitcoin.org/smf/ related links also!
http://www.bitcoinservice.co.uk/files/875

Thanks

[SmokeTooMuch]

Hm, my mining.bitcoin.cz rule seems to be wrong, buit I can't see the mistake.
Can anybody please check that ?