HTTPS Somewhere

HTTPS Somewhere插件简介

HTTPS Somewhere插件描述

[Notice: in alpha state]
If you like to look under the hood, writing some regular expression,  want a safer way to prevent massive XSS attack utilizing TLS  SSL encryption. HTTPS Somewhere will not let you disappointed.
It is another HTTPS redirection extension that do exactly what you want.
(See screenshot f better idea.)

What make HTTPS Somewhere different from HTTPS Everywhere?
 Encrypt what matter rather than attempt to encrypt many websites as possible.
 Wks with resources  elements even on the webpages that not secure.*
 You take full control of the redirection with me advance user interface.
 Take advantage from powerful regular expression you can define any pattern you can imagined.
 Wks completely in the background no icon added to the toolbar.
 HTTPS Somewhere will never break any website without your consent.
 It doesnt try to outsmart you.

Some limitations:
 Relatively difficult compared to HTTPS Everywhere.
 Cant redirect to different hostname.

How to use?
 Check "Options" link in chrome://extensions/

* Why this matter? Why make some resources secure despite that the page itself is not?
It doesnt make anything me secure, does it?
   There is a  in Thail where an attacker exploit caching server of certain ISP. (Probably related to DNS  weird caching behavi. The details never made public  the  was denied by the ISP. However, this  affect millions of endpoints leaving lots of eye witness.) The attacker focus on Googles services included (but not limited to) Google Analytic  Google Ads. Result in massive  largest scale javascript injection I ever see in my life. (My estimation of the revenue the attacker gain from this one attack is at least 6 figures USD. The attack last f months because it is highly inconsistent.) So yeah in they this probably wont gain any security to any page  prevent Eve to do bad things but in practical it does prevent some attack vect.

                                

HTTPS Somewhere插件离线安装方法

1.首先用户点击谷歌浏览器右上角的自定义及控制按钮，在下拉框中选择设置。

2.在打开的谷歌浏览器的扩展管理器最左侧选择扩展程序或直接输入：chrome://extensions/

3.找到自己已经下载好的Chrome离线安装文件xxx.crx，然后将其从资源管理器中拖动到Chrome的扩展管理界面中，这时候用户会发现在扩展管理器的中央部分中会多出一个”拖动以安装“的插件按钮。

4.下载 HTTPS SomewhereChrome插件v0.0.1版本到本地。

5.勾选开发者模式，点击加载已解压的扩展程序，将文件夹选择即可安装插件。

注意：最新版本的chrome浏览器直接拖放安装时会出现“程序包无效CRX-HEADER-INVALID”的报错信息，参照这篇文章即可解决