Firefox does not use HTTPS by default

Bug #1180469 reported by Removed by request
6
Affects Status Importance Assigned to Milestone
firefox (Ubuntu)
Expired
Undecided
Unassigned

Bug Description

Firefox should use HTTPS by default or at least allow a user to make that choice.

Tags: https security
Revision history for this message
Removed by request (removed3995887) wrote :

I noticed that on many sites like Bing, Google, Youtube, etc. Firefox still uses HTTP not HTTPS. If I log into my Google account, Youtube account, Gmail, etc. Firefox still uses HTTP. Thankfully, Firefox does use HTTPS with money transfers and purchases.

Revision history for this message
Chris Coulson (chrisccoulson) wrote :

Can you be a little bit more specific?

Firefox will use https whenever you tell it to (by navigating to a https URL), or whenever the server tells it to (either via a redirect from a http resource to a https resource, or if the server supports the HSTS protocol; in which case Firefox will only connect to that resource via https for whatever time was specified in the HSTS policy).

Searching in Google from the searchbar in Firefox uses https by default. And when I log in to Google, it automatically redirects me to their https endpoint (the redirect is done by Google. This is not Firefox policy). I'm not sure what problem you're having with Google, because the information you've supplied is quite vague.

Changed in firefox (Ubuntu):
status: New → Incomplete
information type: Private Security → Public
Revision history for this message
Sean Fenton (bobodod) wrote :

I agree SSL/TLS by default would be grand, but there are probably several reasons why it's not a good idea. You can get the functionality you're looking for with the EFF's HTTPS Everywhere extension for Firefox and Chrome/Chromium: https://www.eff.org/https-everywhere

Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for firefox (Ubuntu) because there has been no activity for 60 days.]

Changed in firefox (Ubuntu):
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.