Perspectives icon indicating copy to clipboard operation
Perspectives copied to clipboard

Add option to only allow https queries

Open daveschaefer opened this issue 11 years ago • 2 comments

After we get encrypted queries rolled out, add a Preference to only allow https queries. That way even if you accidentally add an unencrypted client, it won't affect your privacy or security.

We should log if the query is not sent and visually display that in the results list.

possible preference name: extensions.perspectives.only_send_https_queries

Use a group of radio buttons in the UI so it's clear what the tradeoff is:

  • Only talk to notaries that support secure (encrypted) queries
  • Allow insecure (unencrypted) queries (Not Recommended)

daveschaefer avatar May 15 '14 05:05 daveschaefer

Maybe this functionality could eventually be combined with #81?

myano avatar Jun 06 '14 13:06 myano

Hey @myano - My intent is for #81 to be the basic functionality for sending https queries at all. I meant this as an enhancement - once we're able to send https queries in the first place, we could add this option to ensure no regular http queries are sent.

Or were you thinking of enforcing that all queries use https?

I think allowing http queries could still be allowed, but I'd probably make https the default.

daveschaefer avatar Jun 07 '14 04:06 daveschaefer