Improvement requests :  K-Meleon Web Browser Forum
Use this forum to talk about a feature you're missing. 
Something like ForceTLS
Posted by: gordon451
Date: September 25, 2011 04:52AM

TSL hackers break SSL encryption
FireSheep extension

Given that many sites do not routinely use HTTPS, can we have something like the ForceTLS FF addon? I have always assumed that KM 1.6.0 supports TLS1.2, but when the site doesn't use security we're still shafted.

We don't need too many bells and whistles in such a feature:
Quote
guenter
at http://kmeleonbrowser.org/forum/read.php?1,119221,119281#msg-119281
p.s. I'd not bother with the overlay or anything and just switch it on for browser sessions that need quality encryption e.g. banking.

All needed for that is knowing the GRE pref and crating a toggle button.
I do not know the GRE pref. sad smiley

Means if I knew more I'd simply try to force the highest possible TSL version that a page supports when needed.

I would not bother with the extension's list or any other added option like privacy mode.

Edited to remove dribble.

Gordon.

____________________
Understanding the scope of the problem is the first step on the path to true panic. [Florence Ambrose, "Freefall" 01372 January 22, 2007 http://freefall.purrsia.com/ff1400/fv01372.htm]



Edited 1 time(s). Last edit at 09/25/2011 04:55AM by gordon451.

Options: ReplyQuote
Re: Something like ForceTLS
Posted by: guenter
Date: September 25, 2011 08:53PM

Quote
gordon451
I have always assumed that KM 1.6.0 supports TLS1.2, but when the site doesn't use security we're still shafted.

TLS1.2 is not implemented in Firefox yet.

TLS 1.1: https://bugzilla.mozilla.org/show_bug.cgi?id=565047
TLS 1.2: https://bugzilla.mozilla.org/show_bug.cgi?id=480514

NoScript implements some security features of ForceTLS.
But I only read that and find NoScript extension hard to use.



Edited 1 time(s). Last edit at 09/25/2011 08:54PM by guenter.

Options: ReplyQuote


K-Meleon forum is powered by Phorum.