Hacker News Reader

I keep forgetting it's not because "HTTPS Everywhere" is on my short list of extensions to install first thing

i was amazed when i looked into it. brave did it, safari had it hidden in the developer menu, chrome: nope. i figured there was something to be gained for them.

ultimately there arent too many sites you type out much of an endpoint for, but "old.reddit.com/r/ihaveembarrassingsecrets" or whatever is a big one.

Yes, I thought either FF or Chrome had implemented this before.

Firefox offers HTTPS Mode, which converts all HTTP links to HTTPS first, A HREFs, stuff you type into the URL bar, everything, then if that fails it generates an interstitial page explaining what went wrong with a button to get the unencrypted HTTP site if that's available.

But that's optional (I wouldn't recommend it to anybody who doesn't seem clear on what HTTPS versus HTTP means for example) and far more invasive, though in exchange it delivers more practical security if you understand what's going on. I've enabled it, I have mentioned it to IT people I know socially, I wouldn't suggest my mother or sister try it.