Hacker News new | ask | show | jobs
by wskinner 3172 days ago
HTTPSEverywhere will not magically upgrade a site that doesn't serve HTTPS to HTTPS. If you connect to a site that doesn't support HTTPS, you are vulnerable.
1 comments
iKenshu 3172 days ago
Oh I see, Thanks for the answer! For what is useful the extension then?
link
thecrazyone 3172 days ago
The extension makes you use the HTTPS connection when the site you are connecting to is known to support HTTPS.

Websites can automatically redirect to HTTPS if the client connects on http, but many websites don't redirect

link
kzahel 3172 days ago
It has the option to block HTTP traffic, making sites that don't support HTTPS unusable.

You could create a separate "secure" profile and feel safe that all traffic is secured, while still being able to browse HTTP in another profile, for instance.

link