Skip to content

Commit 0507f67

Browse files
update readme
1 parent f5fd47c commit 0507f67

File tree

1 file changed

+8
-4
lines changed

1 file changed

+8
-4
lines changed

readme.md

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,13 @@
1+
[![][AMO_button]][AMO]
2+
13
There are numerous similar extensions out there, but HTTPZ is different because it is not smart: it is Zmart. The following summarizes how it works with the default settings:
2-
- When you are about to navigate to a site over HTTP, that request is aborted and a new one is started over HTTPS. If that new request results in an error, it is automatically redirected back to HTTP. If navigating to the site over HTTP throws an error too, HTTPZ does nothing more then. Otherwise, the host is added to the ignore list, and all subsequent requests to it are ignored by the extension for seven days.
3-
- When you navigate to a site over HTTPS by yourself, or because of some external factor (like HSTS preloading), HTTPZ ignores that request, regardless of the outcome.
4-
- When you navigate to a site over HTTPS and *the server* downgrades the request to HTTP, the extension notices this and automatically adds that site to the ignore list.
4+
- When you are about to navigate to a site over HTTP, that request is aborted and a new one is started over HTTPS. If that new request results in an error, it is automatically redirected back to HTTP. If navigating to the site over HTTP throws an error too, HTTPZ does nothing more then. Otherwise, that host is added to the list of known insecure sites, and all subsequent requests to it are ignored by the extension for seven days.
5+
- When you navigate to a site over HTTPS by yourself, or because of some external factor (like HSTS preloading), HTTPZ does not do anything to that request, regardless of the outcome.
6+
- When you navigate to a site over HTTPS and *the server* downgrades the request to HTTP, the extension notices this and allows it. It automatically adds that site to the list of known insecure sites, and does not try to load that site over HTTPS for the next 7 days.
57

68
HTTPZ is meant to be unobtrusive and lightweight, it respects your privacy, and is free of trans fats. Additionally, it is very configurable, and should be slightly more secure than some of the alternatives out there, since it has a couple of built-in defenses against SSL-stripping attacks.
79

8-
It also gets along well with extensions for managing contextual identities (containers), such as [Containerise][Cont] and [Temporary Containers][TC].
10+
It also gets along well with extensions that I recommend for managing contextual identities (containers), such as [Containerise][Cont] and [Temporary Containers][TC].
911

1012
Interested in more recommendations? Head over to the [ghacks-user.js][user.js] GitHub repository. It is an amazing project for hardening Firefox that I have contributed to, and a great source of information (including extension recommendations).
1113

@@ -18,6 +20,8 @@ Acknowledgments
1820
---------------
1921
HTTPZ would not be what it is if not for [its testers' feedback on GitHub][issues].
2022

23+
[AMO]: https://addons.mozilla.org/firefox/addon/httpz/
24+
[AMO_button]: https://camo.githubusercontent.com/3d1db768c27fa8fee0adad148898eb32a9dc00d1/68747470733a2f2f676973742e6769746875622e636f6d2f636c61757374726f6d616e6961632f66303534303631383236616337316266396531323265646232613331336263302f7261772f414d4f2d627574746f6e5f312e706e67
2125
[TC]: https://addons.mozilla.org/firefox/addon/temporary-containers/
2226
[Cont]: https://addons.mozilla.org/firefox/addon/containerise/
2327
[user.js]: https://github.com/ghacksuserjs/ghacks-user.js

0 commit comments

Comments
 (0)