httpswitchboard icon indicating copy to clipboard operation
httpswitchboard copied to clipboard

Provide a possibility to check the trustworthiness of a domain

Open ghost opened this issue 11 years ago • 4 comments

Noscript has a nice but little-known feature: If I open, say, https://github.com/gorhill/httpswitchboard/wiki

open the Noscript menu and middle-click or shift+left-click github.com, the following new tab opens:

http://noscript.net/about/github.com;github.com

which has "links to other resources helping to assess the security and privacy trustworthiness" of the chosen domain.

It would be great if HTTPSB had such a feature, too.

ghost avatar Dec 27 '13 13:12 ghost

Marked as "unlikely" for now. This is contradictory with all the other features to improve privacy. There probably other specialized extensions which offer this service, so I don't see the benefit of duplicating these features here with the side effect of code bloat.

Re. privacy, I see that the requests are made to NoScript server, which is of course better than pinging the various "trustworthiness" (whatever their definition of "trust" is) services directly. However, HTTPSB is server-less, except for the github repository. I don't want to change this, keeping it server-less is one of the basic principle I don't want to compromise.

gorhill avatar Apr 12 '14 22:04 gorhill

I do not want to programmatically query other web sites, but I thought there could be another way to make it easier for a user to query himself.

Very rough idea, a user click of the middle button while in the matrix would open an extension web page which would list all the hostnames reported in the matrix, with links to the most prominent trustworthiness web sites.

Would that be an acceptable compromise?

gorhill avatar May 11 '14 17:05 gorhill

Raymond, thanks for considering this idea. Yes, that looks good to me.

Please take into account that not all mice support middle-clicking, though. I guess that's why Noscript also supports shift+left-clicking as an alternative.

ghost avatar May 12 '14 10:05 ghost

I don't want this — there are other extensions (Web of Trust, for example) that provide third party reviews. The reason there are multiple block lists to import from is that there is no such thing as an authoritative source.

robbiemu avatar May 28 '14 11:05 robbiemu