Re: [HTTPS-Everywhere] HTTPS Everywhere firefox crash mystery

2014-06-18 Thread Yan Zhu
Update: several people have said that the crashes stop after disabling SSL Observatory. On 06/17/2014 10:24 PM, Yan Zhu wrote: > Yan Zhu: >> Recently we've been getting a lot of bug reports about HTTPS Everywhere >> linked to Firefox crashes: >> * https://bugzilla.mozilla.org/show_bug.cgi?id=99943

Re: [HTTPS-Everywhere] Draft specification for file used to check for ruleset updates

2014-06-18 Thread Yan Zhu
Nice work! I have some comments on the spec below (why does gist not allow you to post inline comments??) > However, fetching files using standard XMLHTTPRequests from within the extension is trivial to accomplish and standards-compliant. What does standards-compliant mean here? Maybe omit. > An

Re: [HTTPS-Everywhere] Draft specification for file used to check for ruleset updates

2014-06-18 Thread Maxim Nazarenko
Two more ideas: 1) Switch the design documentation to Git as opposed to Gist -- pull requests are great! 2) Consider using SHA3 (or at least SHA2) instead of SHA1 -- performance loss should be negligible. According to http://valerieaurora.org/hash.html , SHA1 is way into the orange zone :) Best

Re: [HTTPS-Everywhere] HTTPS Everywhere firefox crash mystery

2014-06-18 Thread Bill Phillips
Yes. That seems to work. So far, at least. I recall there were problems WRT the observatory a while back. Don't recall the details, however. Well, time will tell. On Wed, Jun 18, 2014 at 10:18 AM, Yan Zhu wrote: > Update: several people have said that the crashes stop after disabling > SSL Ob