Auto-selection of secure protocol
"Guillaume Michaud" <[email protected]>
| Newsgroups | gmane.comp.mozilla.wishlist |
|---|---|
| Message-ID | <[email protected]> |
Hi ! With the increasing number of online services (Gmail, Meebo and so on), privacy and security on the web is of an increasing importance, which reflects on Mozilla's attitude towards SSL certificates and so on. Some of such online services (such as Gmail and Meebo, again) can be accessed securely with an encrypted connection. However, this is not always the case, and when it is possible, the service providers seldomly "force" their users to use encryption. In short, this means that users who are not computer-savvy never use the encrypted versions. This is mainly because when a user types "myurl" in the url bar of his browser, he is automatically redirected to http://myurl by the browser, and never to https://myurl, excepts if the service provider has enabled the redirection. It could be interesting to offer the user a functionnality which, by default, allows the user to use the encrypted version of a web page, that is to say to redirect him to https://myurl instead of http://myurl when he types "myurl" in the adresse bar. The problem of https://myurl and http://myurl not being the same page could be addressed with a white-list system, or exceptions. The objective is clearly to enable non computer-savvy to use encrypted versions by default, wether they know there is an encrypted version or not. What do you think about it ? Guillaume