adblockplus.org - now with SSL protection · 2009-06-26 13:47 by Wladimir Palant
I enabled SSL on adblockplus.org and easylist.adblockplus.org so that these can be accessed via a secure connection. I also checked that all pages keep you on an encrypted connection once you are there (if you get redirected from HTTPS to plain HTTP somewhere — let me know). Only known problem is the video on the main page (embedding YouTube via SSL doesn’t seem possible) and images in forum posts (these typically come from plain HTTP as well). Oh, and I am using a StartCom certificate which means that only Gecko-based browsers and Safari will recognize it (given the audience of this site, this shouldn’t be a problem).
Why do all that? Sure, nobody enters his credit card info on this site — but you don’t want anybody to manipulate your extension downloads either. In particular, development build downloads should only be possible via SSL in future (probably with automatic updates then). As to single-language builds, I will likely remove those because SeaMonkey’s problematic extension installation mechanism was the main reason to have those — but starting with Adblock Plus 1.1 only SeaMonkey 2.0 will be supported.
Finally, we will probably start serving EasyList via SSL in future. While the introduction of checksums made sure that nobody gets corrupt filters any more, some people simply cannot get filters because their proxy/firewall/whatever manipulates the response. This kind of manipulation will no longer be possible with SSL which will hopefully result in more reliable downloads.
Commenting is closed for this article.