On 2014-02-20 04:39, Dale Visser wrote:
HTTPS Everywhere Maintainers:

I love feedly.com. Its Firefox plugin, however insists on sending me to the HTTP rather than HTTPS page. The attached HTTPS Everywhere rule fixes this for me.

Thank you for a great browser plug-in!

Sincerely,
Dale Visser


A couple thoughts...

The <ruleset name> should be Feedly, not Twitter :) More importantly though, for a time Feedly used cloud.feedly.com, this URL should be included too, as certain URLs there still work, allowing for a downgrade attack until such time as Feedly completely eliminates the cloud version of the URL.

(It's possible that the entire cloud.* URL has been redirected now, I'm not quite sure. Better safe than sorry)

Attached is the ruleset I've been testing for the last week or two, with success.

--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren

<ruleset name="feedly.com">
  <target host="feedly.com" />
  <target host="www.feedly.com" />
  <target host="cloud.feedly.com" />

  <rule from="^http://((cloud|www)\.)?feedly\.com/" to="https://feedly.com/"/>
</ruleset>

Reply via email to