HTTPS Everywhere rules for owncloud.org

Talk, ideas, changes, critics ... everything Forum related topics
Forum rules
The forums were migrated over to https://central.owncloud.org which is based on the forum software Discourse. The forums here is put into read-only mode starting from today.

More background information about this move and the reasoning behind it is available in this blogpost:

https://daniel.molkentin.net/2016/07/20 ... d-central/
RealRancor
ownCloud master
Posts: 17381
Joined: Sat May 26, 2012 3:00 pm
ownCloud version: 9.0.2
Webserver: nginx
Database: MySQL
OS: Linux
PHP version: 7.0.x

HTTPS Everywhere rules for owncloud.org

Postby RealRancor » Sat May 03, 2014 2:56 pm

any sites on the web offer some limited support for encryption over HTTPS, but make it difficult to use. For instance, they may default to unencrypted HTTP, or fill encrypted pages with links that go back to the unencrypted site. The HTTPS Everywhere extension fixes these problems by using a clever technology to rewrite requests to these sites to HTTPS.


The plugin is available for Firefox (PC and Android), Chrome and Opera:

https://www.eff.org/https-everywhere/

I have written a rule for forum.owncloud.org and owncloud.org and just want to post it in here:

Code: Select all

<ruleset name="owncloud.org">
   <target host="www.owncloud.org" />
   <target host="owncloud.org" />
   <target host="forum.owncloud.org" />
   <securecookie host="^owncloud\.org$" name=".+" />
   <rule from="^http://(www\.)?owncloud\.org/" to="https://owncloud.org/"/>
   <rule from="^http://forum\.owncloud\.org/" to="https://forum.owncloud.org/"/>
</ruleset>


You need to copy the file above with the name owncloud.xml (for example) into the folder "HTTPSEverywhereUserRules" of your Firefox profile and restart Firefox. (Chrome and Opera users needs to do some research how this is done at their browser).

The securecookie part of the rule is not really needed as the forum itselfs sets the proper "secure" cookie flag.
*gone*

rakekniven
Inventory
Posts: 2019
Joined: Sun May 06, 2012 3:31 pm
ownCloud version: 9.0.1
Webserver: Apache
Database: MySQL
OS: Linux Hosting Package
PHP version: 5.6.x
Contact:

Re: HTTPS Everywhere rules for owncloud.org

Postby rakekniven » Mon May 19, 2014 5:54 pm

Hey Rancor,

nice job.

Any chance to submit your work to eff to include it in their ruleset?

Cheers
ownCloud is not only about files. There is so much more. Explore the apps to extend your ownCloud.

RealRancor
ownCloud master
Posts: 17381
Joined: Sat May 26, 2012 3:00 pm
ownCloud version: 9.0.2
Webserver: nginx
Database: MySQL
OS: Linux
PHP version: 7.0.x

Re: HTTPS Everywhere rules for owncloud.org

Postby RealRancor » Mon May 19, 2014 8:59 pm

Hi,

yes it is possible to submit rules to EFF and i have considered it. But i first want to do some more tests and also see if i could get an feedback from other users in here.
*gone*

rakekniven
Inventory
Posts: 2019
Joined: Sun May 06, 2012 3:31 pm
ownCloud version: 9.0.1
Webserver: Apache
Database: MySQL
OS: Linux Hosting Package
PHP version: 5.6.x
Contact:

Re: HTTPS Everywhere rules for owncloud.org

Postby rakekniven » Tue May 20, 2014 10:01 am

Just added your xml file to my Firefox 29 on Mavericks OS X and it works pretty well for all URLs.

:D
ownCloud is not only about files. There is so much more. Explore the apps to extend your ownCloud.

rakekniven
Inventory
Posts: 2019
Joined: Sun May 06, 2012 3:31 pm
ownCloud version: 9.0.1
Webserver: Apache
Database: MySQL
OS: Linux Hosting Package
PHP version: 5.6.x
Contact:

Re: HTTPS Everywhere rules for owncloud.org

Postby rakekniven » Fri Jul 18, 2014 9:25 am

@Rancor: Did you submit your work to EFF?
ownCloud is not only about files. There is so much more. Explore the apps to extend your ownCloud.

RealRancor
ownCloud master
Posts: 17381
Joined: Sat May 26, 2012 3:00 pm
ownCloud version: 9.0.2
Webserver: nginx
Database: MySQL
OS: Linux
PHP version: 7.0.x

Re: HTTPS Everywhere rules for owncloud.org

Postby RealRancor » Fri Jul 18, 2014 10:46 am

Hi,

not yet. Will see how this can be submitted to EFF.
*gone*

RealRancor
ownCloud master
Posts: 17381
Joined: Sat May 26, 2012 3:00 pm
ownCloud version: 9.0.2
Webserver: nginx
Database: MySQL
OS: Linux
PHP version: 7.0.x

Re: HTTPS Everywhere rules for owncloud.org

Postby RealRancor » Fri Jul 18, 2014 2:40 pm

*gone*

rakekniven
Inventory
Posts: 2019
Joined: Sun May 06, 2012 3:31 pm
ownCloud version: 9.0.1
Webserver: Apache
Database: MySQL
OS: Linux Hosting Package
PHP version: 5.6.x
Contact:

Re: HTTPS Everywhere rules for owncloud.org

Postby rakekniven » Fri Jul 18, 2014 11:21 pm

Great. In the meantime so added xml on on 3 windows machines. Works great
ownCloud is not only about files. There is so much more. Explore the apps to extend your ownCloud.

tflidd
Forum Moderator
Posts: 7159
Joined: Sat Dec 07, 2013 7:27 pm
ownCloud version: 8.2.3
Webserver: Apache
Database: MySQL
OS: Linux

Re: HTTPS Everywhere rules for owncloud.org

Postby tflidd » Sat Mar 28, 2015 3:28 pm

Strange, I still needed to put the rules manually.

By the way, don't you think it makes sense to redirect all http-queries to https automatically? Especially now when you already use a HSTS header.

RealRancor
ownCloud master
Posts: 17381
Joined: Sat May 26, 2012 3:00 pm
ownCloud version: 9.0.2
Webserver: nginx
Database: MySQL
OS: Linux
PHP version: 7.0.x

Re: HTTPS Everywhere rules for owncloud.org

Postby RealRancor » Sat Mar 28, 2015 4:40 pm

Hi,

normally you don't need this rules anymore:

curl -I http://forum.owncloud.org

HTTP/1.1 301 Moved Permanently
Date: Sat, 28 Mar 2015 14:38:33 GMT
Server: Apache
Location: https://forum.owncloud.org/
Content-Type: text/html; charset=iso-8859-1


and

curl -I http://www.owncloud.org

HTTP/1.1 301 Moved Permanently
Date: Sat, 28 Mar 2015 14:39:00 GMT
Server: Apache
Location: https://owncloud.org/
Content-Type: text/html; charset=iso-8859-1


There is already a redirect rule in place to redirect all non-ssl traffic to the ssl enabled pages.
*gone*


  • Similar Topics
    Replies
    Views
    Last post

Return to “Around the forum”

Who is online

Users browsing this forum: No registered users and 1 guest