Do not use substitutes
HTTPS Everywhere is a Firefox, Chrome, and Opera extension that encrypts your communications with many major websites, making your browsing more secure. Encrypt the web: Install HTTPS Everywhere today.
HTTPS Everywhere is produced as a collaboration between The Tor Project and the Electronic Frontier Foundation. Many sites on the web offer some limited support for encryption over HTTPS but make it difficult to use.
For instance, they may default to unencrypted HTTP, or fill encrypted pages with links that go back to the unencrypted site.
The HTTPS Everywhere extension fixes these problems by using clever technology to rewrite requests to these sites to HTTPS.
Information about how to access the project’s Git repository and get involved in development is here.
Webmasters and prospective contributors:
Check the HTTPS Everywhere Atlas to quickly see how existing HTTPS Everywhere rules affect sites you care about!
Problems Installing: Some people report that installing HTTPS Everywhere gives them the error: “The addon could not be downloaded because of a connection failure on www.eff.org.” See this FAQ entry for help.
Feedback: If you want to send us your comments, please email [email protected].
Questions and Caveats
Sadly, many sites still include a lot of content from third party domains that are not available over HTTPS.
As always, if the browser’s lock icon is broken or carries an exclamation mark, you may remain vulnerable to some adversaries that use active attacks or traffic analysis. However, the effort that would be required to eavesdrop on your browsing should still be usefully increased.
Update: in recent versions of Firefox, Mozilla has removed the broken padlock indicator.
Now, the only difference between a secure and insecure HTTPS deployment is the blue or green tint on the left of the address bar for secure deployments.
- Stable releases for Firefox:
- Stable releases for Chrome, Chromium, and Opera 15+:
- Note: If you install the standalone .crx (i.e. not from the Chrome Web Store), and you are using Windows, Chrome will automatically disable the extension on each restart. You may be able to work around by using developer mode.