ssleuth
ssleuth copied to clipboard
sibiantony
Web extensions are the future
The current plan is that Firefox 57 will only support web extensions. Your add-on is not a web extension yet as far as I can see, so you should consider remaking your add-on. The Firefox 57 release is planned for 28th November 2017. Already for Firefox 53 (planned release: 18th April 2017) it is planned to no longer accept other new add-on submissions than web extensions on AMO (addons.mozilla.org). Old extensions can however still be updated. The good message is that one should be able to use your web extensions add-on in all mayor browsers. That's the idea behind web extensions.
Note that all dates are estimates and may be changed.
German source: https://www.soeren-hentzschel.at/firefox/firefox-57-mit-exklusiver-webextension-unterstuetzung/ Original source: https://blog.mozilla.org/addons/2016/11/23/add-ons-in-2017/
Hm. Have seen this. Unfortunately I don't have enough time to port/maintain.
Besides, I havn't checked the sslStatus interface etc. I doubt if those are possible with webextensions. It is not allowed for Chrome, so not sure how it is going to be with Firefox.
Besides, I havn't checked if the sslStatus interface etc.
Yep, that's also my fear.
It is not allowed for Chrome, so not sure how is it going to be with Firefox.
At least Firefox plans to implement more APIs in Firefox than Chrome or the webextensions standard. And of course web extensions are still in development. We should persuade Mozilla to make such ssl/tls things also available and maybe a bit more such as elliptic curves.
Should I open a bugzilla bug?
Should I open a bugzilla bug?
If you have some time to spare, yes. Mozilla has this interface called SSLStatus (http://doxygen.db48x.net/mozilla-full/html/da/db2/interfacensISSLStatus.html) and the good working of SSleuth depends on it. ( There are other things like certificate parsing, http observer etc. for which I don't see a problem with Mozilla supporting ). But I'm not sure about SSLStatus. Please do some research before raising the bug. I myself havn't spent enough time on the web extensions documentation.
From a quick research I could not found anything, so I opened a bug: https://bugzilla.mozilla.org/show_bug.cgi?id=1322748
@sibiantony, maybe you want to comment on the BugZilla ticket. See this request:
It would be great to have a concrete list of the specific use-cases and overall aims of add-ons that would use such an API. That way we can design an API that provides something meaningful.
In the bugzilla issue there is much discussion and it seems to go on, but as for this add-on: Do you think you can create a new version until Firefox 57? What are your future plans?
I'm following the bug comments, and I can see a ray of hope with EFF's proposal. If Mozilla does implement this soon enough, I can offer a web extension version to use with Firefox 57+. ( With the minimal functionality without configuration, domains watching etc. all of which can be added eventually. )
However from the current release chart Firefox 57 will be in beta by next month, and I doubt if Mozilla can make it for developer testing.
HTTPS Everywhere seems to have a Web Extension on Firefox version now, does it mean at least a part it available for you?
HTTPS Everywhere works in a very different way. It is just about redirecting http to https. This was always available in the WebExtension API in Firefox. This add-on needs much more. It seems Mozilla devs still discuss implementation/details, so it may still take some Firefox versions. As always, you can vote for the bugzilla ticket or so to make them aware that this issue is of importance to you.
to bad, that this extension is not compatible to new Firefox Browser. Loved it 🥇
maybe a light version possible?
Hi, Sibi and thank you for one of the best extensions on security information for Firefox. Please (if you can find the time) consider updating as soon as the API will be available.
- all my colleagues (big number) and friends used SSLeuth on my recommendation
- your work is more important than ever in this crazy world!
(the stupid "green safe address-bar" is even worst since you can easily get a free ssl cert and users that will see green will not check anything else...)
Below is the progress on the matter: https://bugzilla.mozilla.org/show_bug.cgi?id=1322748
Works great in Pale Moon. In fact, almost everything does. Maybe Mozilla will get it together someday, but the devs there have had a bad attitude for a long time, so I rather doubt it. I seriously doubt I'll ever go back to Firefox.
https://bugzilla.mozilla.org/show_bug.cgi?id=1322748 is already near it's end. So if you, @sibiantony, need another feature there, you'd better ask for it now.
We can expect something to be done (and any Firefox version expected?) ?
Good news: The bug has been marked as fixed and will be shipped in Firefox 62 as it seems.
So better start implementation of this add-on now…
somebody has asked for an API document but still as when firefox 62 releases, you can get on trying to fix what needs fixing.
Yes, good news. API documentation isn't a problem. The details are in the patch. Firefox 62 is scheduled for 5th of September. I hope to make an initial version available for Beta (July).
Meanwhile, maybe use Liberapay? https://github.com/sibiantony/ssleuth/issues/86
Firefox 62 will have the new API and it is currently in Beta. https://addons.mozilla.org/en-US/firefox/addon/certainly-something/ is already an add-on for viewing certificate details.
Folks, I couldn't spare enough time for this. Things had been keeping me busy. The plan to migrate is still on, but will be slow.
online privacy/security is important stuff these days so your work is appreciated! thank you.
An alternative and possibly a codebase to work from: https://addons.mozilla.org/en-GB/firefox/addon/indicatetls/ https://github.com/jannispinter/indicatetls
Apologies to the community for the delay. Havn't tried the above addon, but looks good. 'Certainly something' is another good addon I'd recommend. The only difference Ssleuth can offer is the grading. Once again, sorry folks.
Hi there,
I am the developer of IndicateTLS and have just published a new release that resembles the UI of SSLeuth.
I'm looking forward to hear what you think about it.
looks great - i just wish it would integrate into the original green lock on the left side...
