Re: wishlist Digest, Vol 34, Issue 2

good idea


2008/10/10 <[email protected]>

> Send wishlist mailing list submissions to
>        [email protected]
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        https://lists.mozilla.org/listinfo/wishlist
> or, via email, send a message with subject or body 'help' to
>        [email protected]
>
> You can reach the person managing the list at
>        [email protected]
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of wishlist digest..."
>
>
> Today's Topics:
>
>   1. Auto-selection of secure protocol (Guillaume Michaud)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Fri, 10 Oct 2008 09:31:26 +0200
> From: "Guillaume Michaud" <[email protected]>
> Subject: Auto-selection of secure protocol
> To: [email protected]
> Message-ID:
>        <[email protected]>
> Content-Type: text/plain; charset=ISO-8859-1
>
> Hi !
>
> With the increasing number of online services (Gmail, Meebo and so on),
> privacy and security on the web is of an increasing importance, which
> reflects on Mozilla's attitude towards SSL certificates and so on.
> Some of such online services (such as Gmail and Meebo, again) can be
> accessed securely with an encrypted connection. However, this is not always
> the case, and when it is possible, the service providers seldomly "force"
> their users to use encryption.
> In short, this means that users who are not computer-savvy never use the
> encrypted versions.
>
> This is mainly because when a user types "myurl" in the url bar of his
> browser, he is automatically redirected to http://myurl by the browser,
> and
> never to https://myurl, excepts if the service provider has enabled the
> redirection.
>
> It could be interesting to offer the user a functionnality which, by
> default, allows the user to use the encrypted version of a web page, that
> is
> to say to redirect him to https://myurl instead of http://myurl when he
> types "myurl" in the adresse bar.
> The problem of https://myurl and http://myurl not being the same page
> could
> be addressed with a white-list system, or exceptions.
>
> The objective is clearly to enable non computer-savvy to use encrypted
> versions by default, wether they know there is an encrypted version or not.
>
> What do you think about it ?
>
> Guillaume
>
>
> ------------------------------
>
> _______________________________________________
> wishlist mailing list
> [email protected]
> https://lists.mozilla.org/listinfo/wishlist
>
>
> End of wishlist Digest, Vol 34, Issue 2
> ***************************************
>