Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #234205

Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS connections

Show all headers | View raw

On Thu, 15 Apr 2021 09:31:11 -0300
Eduardo M KALINOWSKI <eduardo@kalinowski.com.br> wrote:

> 
> On 15/04/2021 09:12, Celejar wrote:
> > On Thu, 15 Apr 2021 11:16:59 +0100
> > piorunz <piorunz@gmx.com> wrote:
> >
> >> On 15/04/2021 03:15, Celejar wrote:
> >>
> >>> http://www.daat.ac.il/
> >>> https://www.daat.ac.il/
> >>>
> >>> Celejar
> 
> I can confirm the problem, by the way.
> 
> >> Their webserver is misconfigured. AFAIR, if they don't support https,
> >> their server should redirect to http page. Instead, they throw 404 error.
> > Do you have a reference for this as required by the standards?
> 
> I don't think this is required by any standard.
> 
> But it's certainly bad practice: if they don't want to support https, 
> they should disable it, and not return a 404 error. It may not be a 
> requirement that the http and https content have to be the same, but it 
> certainly makes a lot of sense that they are.
> 
> So I'd agree that the website is misconfigured. You might try contacting 
> them.
> 
> Unlike the HTTPS Everywhere extension, that has a list of sites that 
> should be accessed only with https, the built-in Firefox function seems 
> to just try to make an https connection, and if it succeeds, assumes 
> (reasonably, IMHO) that the site supports https. Since 404 is a valid 
> response that in no way indicates lack of https support (on the 
> contrary), it then redirects everything to https.

Thank you. That was my analysis of the problem as well.

> The docs say you can disable https for a specific site: 
> https://blog.mozilla.org/security/2020/11/17/firefox-83-introduces-https-only-mode/ 

I tried the setting, but it didn't seem to work.

> . But if this happens a lot, it might be simpler to simply disable that 
> 
> Firefox feature. Not because it's buggy, but because it make reasonable 
> assumptions about websites' behaviours, which unfortunately are not 
> followed by everyone.

I may have to do that.

Celejar

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Celejar <celejar@gmail.com> - 2021-04-14 18:20 +0200
  Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS connections riveravaldez <riveravaldezmail@gmail.com> - 2021-04-14 21:10 +0200
    Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Nito <nito@dismail.de> - 2021-04-15 02:40 +0200
    Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Celejar <celejar@gmail.com> - 2021-04-15 04:30 +0200
  Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections piorunz <piorunz@gmx.com> - 2021-04-15 00:00 +0200
    Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Celejar <celejar@gmail.com> - 2021-04-15 04:20 +0200
      Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS connections Kenneth Parker <sea7kenp@gmail.com> - 2021-04-15 05:00 +0200
        Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS connections Joe Pfeiffer <pfeiffer@cs.nmsu.edu> - 2021-04-15 06:00 +0200
          Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS connections Kenneth Parker <sea7kenp@gmail.com> - 2021-04-15 07:20 +0200
            Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Dan Ritter <dsr@randomstring.org> - 2021-04-15 15:40 +0200
              Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS connections Kenneth Parker <sea7kenp@gmail.com> - 2021-04-15 16:40 +0200
              Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Richard Hector <richard@walnut.gen.nz> - 2021-04-16 03:10 +0200
                Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Tixy <tixy@yxit.co.uk> - 2021-04-16 10:40 +0200
              Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Jonathan Dowland <jon+debian-user@dow.land> - 2021-04-16 12:40 +0200
      Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections piorunz <piorunz@gmx.com> - 2021-04-15 12:20 +0200
        Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Darac Marjal <mailinglist@darac.org.uk> - 2021-04-15 12:50 +0200
          Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Jonathan Dowland <jon+debian-user@dow.land> - 2021-04-15 14:40 +0200
            Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Jonathan Dowland <jon+debian-user@dow.land> - 2021-04-15 14:40 +0200
        Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Greg Wooledge <greg@wooledge.org> - 2021-04-15 13:30 +0200
        Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Celejar <celejar@gmail.com> - 2021-04-15 14:20 +0200
          Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Eduardo M KALINOWSKI <eduardo@kalinowski.com.br> - 2021-04-15 14:40 +0200
            Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Celejar <celejar@gmail.com> - 2021-04-15 17:20 +0200
          Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections mett <mett@pmars.jp> - 2021-04-15 14:50 +0200
            Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections piorunz <piorunz@gmx.com> - 2021-04-15 16:20 +0200
              Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Erwan David <erwan@rail.eu.org> - 2021-04-15 16:50 +0200
                Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections piorunz <piorunz@gmx.com> - 2021-04-15 17:50 +0200
                Re: Firefox HTTPS-only mode breaks sites that return 404 for HTTPS  connections Jonathan Dowland <jon+debian-user@dow.land> - 2021-04-16 13:30 +0200

csiph-web