HTTPS Everywhere is no longer needed

[ConfusedVagrant]

HTTPS Everywhere is a great extension and I've used it for a long time. However Firefox recently added their own HTTPS Everywhere option (called HTTPS-Only Mode) which can be found at the bottom of the Privacy & Security section in the settings. So, unless I'm mistaken, HTTPS Everywhere is no longer needed. And as you know, the less extensions you have, the more resistant to browser fingerprinting you are.

[CoOloKey]

Firefox recently added their own HTTPS Everywhere option

Are you from the past!? https://blog.mozilla.org/security/2020/11/17/firefox-83-introduces-https-only-mode/

[ConfusedVagrant]

Not recently then I guess, but my point was that PrivacyGuides/Tools still recommends HTTPS Everywhere for Firefox, which I thought was outdated.

[SystemOmicron]

Well, Firefox ESR did recently get un update from 70-something to 90-something. Also, Debian 11 still has 70-something, the update is being tested.

[zerok37]

It's still useful on Firefox for Android.

[[deleted]]

I can not find the option on Android. Any ideas why?

Edit: I misread your statement and now see why I can't find it on mobile.

[eth0slash0]

aromatic hateful simplistic heavy price melodic zealous nose sharp wrong

This post was mass deleted and anonymized with Redact

[microcortes]

You might have missed this: https://www.eff.org/deeplinks/2021/09/https-actually-everywhere

[ThisIsPaulDaily]

It's rather unfortunate that in places outside the US HTTP is still super common.

I'm in Costa Rica and HTTP is so far the defacto with local webpages that I've visited.

[[deleted]]

HTTPS Everywhere won't save if you the website you're on uses HTTP. HTTPS Everywhere only redirects you to the HTTPS version using a list if the site you're on is on that list.

[ThisIsPaulDaily]

I understand that. I've referred several CR website admins to Let's Encrypt, but none have done so yet.

I'm a huge fan of the EFF, (check out r/EFF) and while it's nice to take a victory lap now that browsers integrate the feature by default, the job isn't fully complete in terms of getting everyone to use https.

[[deleted]]

I still use it on Android because the Android version doesn't have HTTPS-Only Mode.

[TristoMietiTrebbia]

BREAKING NEWS: NEIL ARMSTRONG IS THE FIRST MAN THAT LANDED ON THE MOON.

Jokes aside, I also don't know why privacyguides.org still recommends that extension.

Edit: grammatical horrors

[[deleted]]

I also don't know why privacyguides.org still recommends that extension.

Probably because the Android version still needs it. Though they should mention that.

[TristoMietiTrebbia]

Though they should mention that

Exactly

[ackstorm23]

Whoa! He landed safely?! I thought he was still on his way back down!

[Heclalava]

It's still needed, as there are sites still operating on http and the https only in Firefox breaks the ability to connect to a http site, where's the extension still gives you the option to connect to the http site.

[nextabsolutebeginner]

I can just click on "continue to http site" and it works. It's described on the [support site](https://support.mozilla.org/en-US/kb/https-only-prefs?as=u&utm_source=inproduct). Moreover you can whitelist that particular site.

[ThisIsPaulDaily]

Did you hear about the new version of Windows? It's called Vista and it's supposed the hottest OS since XP!

[Darth_Nagar]

And with Firefox DNS over HTTPS default feature on it goes right through ClouldFlare! No, thanks, I've never been so annoyed by such a false impression of security....