[The security box] Electronic Frontier Foundation will deprecate HTTPS Everywhere plugin

Jared Rimer jaredrimer at 986themix.com
Wed Oct 6 16:33:55 EDT 2021


Oose, 2.  https: hyper text transport protocol secure

Jared Rimer
Check out my shows on 986 the mix. www.986themix.com/schedule for more 
info. Shows are on Wednesdays, Saturdays and Sundays
Wednesday's show is on the independent channel. Check schedule for time
www.jaredrimer.net for my other site.

On 10/6/2021 10:43 AM, Jared Rimer via Thesecuritybox wrote:
> Terms:
> 
> 1.  HTML: hyper text markup language
> 2.  https: hyper text transport secure
> 3. http: hyper text transport protocol
> 4.  Depreciate: discontinue
> 
> Jared Rimer
> Check out my shows on 986 the mix. www.986themix.com/schedule for more 
> info. Shows are on Wednesdays, Saturdays and Sundays
> Wednesday's show is on the independent channel. Check schedule for time
> www.jaredrimer.net for my other site.
> 
> On 10/6/2021 10:32 AM, Jennifer Martinez via Thesecuritybox wrote:
>> Ok. I'm going to play stupid for a minute. What is depreciate? Is it 
>> not to make something worth less? Obsolete? Or worthless, as in zero 
>> value? What exactly...how exactly will this impact internet travel to 
>> the current http(s)? What is http anyway? Does anyone know what 
>> http(s)...what does it actually stand for? I know html stands for 
>> hyper-text-media-link? What then is http? 
>> Hyper-text-telecommunication-portal? Is that right? Anyone know for sure?
>>
>> Jen
>>
>> Sent from Yahoo Mail on Android 
>> <https://go.onelink.me/107872968?pid=InProduct&c=Global_Internal_YGrowth_AndroidEmailSig__AndroidUsers&af_wl=ym&af_sub1=Internal&af_sub2=Global_YGrowth&af_sub3=EmailSignature> 
>>
>>
>>     On Tue, Oct 5, 2021 at 7:29 PM, Michael Brock via Thesecuritybox
>>     <thesecuritybox at 986themix.com> wrote:
>>
>>     Electronic Frontier Foundation will deprecate HTTPS Everywhere plugin
>>     Ars Technica  /  Jim Salter
>>
>>     All four major browsers have duplicated HTTPS Everywhere
>>     functionality natively.
>>     Rising line graph.
>>     Enlarge
>>     
>> <https://cdn.arstechnica.net/wp-content/uploads/2021/09/httparchive-report.png> 
>>
>>     / We had trouble even finding HTTPS statistics earlier than 2016—but
>>     even in 2016, fewer than one in four websites were delivered via 
>> HTTPS.
>>
>>     Last week, the Electronic Frontier Foundation announced
>>     
>> <https://www.eff.org/deeplinks/2021/09/https-actually-everywhere> that
>>     it will deprecate its HTTPS Everywhere browser plugin
>>     <https://addons.mozilla.org/en-US/firefox/addon/https-everywhere/>
>>     in 2022. Engineering director Alexis Hancock summed it up in the
>>     announcement's own title: "HTTPS is actually everywhere."
>>
>>     The EFF originally launched
>>     
>> <https://www.eff.org/deeplinks/2010/06/encrypt-web-https-everywhere-firefox-extension> HTTPS 
>>
>>     Everywhere—a plugin that automatically upgrades HTTP connections to
>>     HTTPS—in 2010 as a stopgap measure for a world that was still
>>     getting accustomed to the idea of encrypting all web-browser traffic.
>>
>>     When the plugin was new, the majority of the Internet was served up
>>     in plaintext—vulnerable to both snooping and manipulation by any
>>     entity that could place itself between a web-browsing user and the
>>     web servers they communicated with. Even banking websites frequently
>>     offered unencrypted connections! Thankfully, the web-encryption
>>     landscape has changed dramatically in the 11 years since then.
>>
>>     We can get some idea of just how far the protocol has come by
>>     looking at HTTP Archive's State of the Web report
>>     <https://httparchive.org/reports/state-of-the-web#pctHttps>. In
>>     2016—six years after HTTPS Everywhere first launched—the HTTP
>>     Archive recorded encrypted connections for fewer than one site in
>>     every four it crawled. In the five years since, that number has
>>     skyrocketed—as of July, the Archive crawls nine of every 10 sites
>>     via HTTPS. (Google's Transparency Report
>>     <https://transparencyreport.google.com/https/overview> shows a
>>     similar progression, using data submitted by Chrome users.)
>>
>>     Although the increased organic HTTPS adoption influenced the EFF's
>>     decision to deprecate the plugin, it's not the only reason. More
>>     importantly, automated upgrade from HTTP to HTTPS is now available
>>     natively in all four major consumer browsers—Microsoft Edge, Apple
>>     Safari, Google Chrome, and Mozilla Firefox.
>>
>>     Unfortunately, Safari is still the only mainstream browser to force
>>     HTTPS traffic by default—which likely informed the EFF's decision to
>>     retire HTTPS Everywhere until /next/ year. Firefox and Chrome offer
>>     a native "HTTPS Only" mode that must be user-enabled, and Edge
>>     offers an experimental "Automatic HTTPS" as of Edge 92.
>>
>>     If you'd like to enable HTTPS Only/Automatic HTTPS natively in your
>>     browser of choice today, we recommend visiting the EFF's own
>>     announcement
>>     <https://www.eff.org/deeplinks/2021/09/https-actually-everywhere>,
>>     which includes both step-by-step instructions and animated
>>     screenshots for each browser. After enabling your browser's native
>>     HTTPS upgrade functionality, you can safely disable the
>>     soon-to-be-deprecated HTTPS Everywhere plugin.
>>
>>     /Listing image by Rock1997 / Wikipedia
>>     <https://en.wikipedia.org/wiki/HTTPS#/media/File:Internet2.jpg>/
>>
>>
>>
>>     Original Article: https://arstechnica.com/?p=1798812
>>     <https://arstechnica.com/?p=1798812>
>>
>>
>>     Michael Brock
>>     Thank you for subscribing to the Security Box email list.  If you
>>     need list management options, please see the link for a section to
>>     log in, manage your subscription, and possibly other options that
>>     may be of interest.
>>
>>     Need help?  write the owner, and the owner will get back to you as
>>     quickly as possible.  Be clear on what you need.
>>
>>     Thanks for subscribing!
>>
>>     --     Thesecuritybox mailing list
>>     Thesecuritybox at 986themix.com <mailto:Thesecuritybox at 986themix.com>
>>     
>> http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com
>>     
>> <http://mail.986themix.com/mailman/listinfo/thesecuritybox_986themix.com>
>>
>>
>> Thank you for subscribing to the Security Box email list.  If you need 
>> list management options, please see the link for a section to log in, 
>> manage your subscription, and possibly other options that may be of 
>> interest.
>>
>> Need help?  write the owner, and the owner will get back to you as 
>> quickly as possible.  Be clear on what you need.
>>
>> Thanks for subscribing!
>>
> 
> Thank you for subscribing to the Security Box email list.  If you need 
> list management options, please see the link for a section to log in, 
> manage your subscription, and possibly other options that may be of 
> interest.
> 
> Need help?  write the owner, and the owner will get back to you as 
> quickly as possible.  Be clear on what you need.
> 
> Thanks for subscribing!
> 




More information about the Thesecuritybox mailing list