[HTTPS-Everywhere] Sites with incomplete chains

2015-04-23 Thread Alexander Buchner
What should we do with sites with incomplete certificate chains? I just noticed that my Firefox will download extra certificates on the fly (and so doesn't complain about the missing certificate(s)) while the Firefox instance that starts by calling ./test.sh --justrun will not (and perhaps neither

Re: [HTTPS-Everywhere] Sites with incomplete chains

2015-04-23 Thread Jonas Witmer
Am 15.02.15 um 19:17 schrieb Jacob Hoffman-Andrews: > Good point! I think we are also missing some of the most current > certificates from Firefox, which I plan to update: > https://support.google.com/dfp_sb/answer/2524536?hl=en. If we still > have issues after updating those, we may want to instal

Re: [HTTPS-Everywhere] Sites with incomplete chains

2015-04-23 Thread Jacob Hoffman-Andrews
> Should we write a rule for such a site (e.g. bundesrat.de) or should > their implementation be regarded as broken? Sites where Firefox can download the intermediate should be considered working, and we can write rules for them. We should aim to make the checker smart enough to not be flummoxed b

[HTTPS-Everywhere] New release: 5.0.3 / chrome-2015.4.23

2015-04-23 Thread Jacob Hoffman-Andrews
Hi all, I've pushed a new release to all channels. Just ruleset updates this time. Enjoy! Jacob ___ HTTPS-Everywhere mailing list [email protected] https://lists.eff.org/mailman/listinfo/https-everywhere