EFForg / https-everywhere

A browser extension that encrypts your communications with many websites that offer HTTPS but still allow unencrypted connections.

Home Page:https://eff.org/https-everywhere

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

objects.githubusercontent.com is not forced HTTPS

wesinator opened this issue · comments

commented

Type: ruleset/website issue

//: # Domain: http://objects.githubusercontent.com

this domain is not forced https for any urls, either by the server or by https-everywhere extension.
Many Github projects use this domain for file release downloads.

e.g. download links for Assets on https://github.com/EFForg/https-everywhere/releases/tag/2022.5.24
objects.githubusercontent.com insecure request