HTTPS-Everywhere: how to understand "(partial)" encryption?
Can I see which parts are encrypted and which parts of the websites are not encrypted if status is (partial)?
All Replies (7)
hello uTZ8qQW, yes you can open the web console under tools > web developer & enable net logging. while a new page is loading this will this will show all elements that are not encrypted (=mixed content).
firefox now also has the possibility to block mixed content by default - for some information about it see www.ghacks.net/2013/04/09/firefox-23-to-block-insecure-contents-from-being-loaded-on-https-pages/ for example. however at the moment i'd only recommend to block active content, since there are still many secure sites that embed pictures & videos through a non-encrypted connection - blocking mixed display content would break the functionality of such sites (youtube,...).
I do not see "enable net logging" anywhere.
I am using default Firefox that comes with Ubuntu 12.10
edit: I opened "Web Console" and enabled all logs, I still don't see red warnings about insecure content.
Modified
ok, i've just tested it again on firefox 20 on windows and it works whether the net button is activated or not (see screenshot)- the warnings about mixed content will appear while a page is loading.
you probably need a firefox that is up to date - i don't know which firefox version shipped with ubuntu 12.10, but there should be updates to the application available through the packet manager of the OS...
Firefox Nightly 23.0a1 (2013-05-09)
which site are you trying to access - is it the same on the test page? (you can disable the logging of net, js, css & logging content): https://ie.microsoft.com/testdrive/browser/mixedcontent/assets/woodgrove.htm
progress, I can see blocking of one js:
See also:
Firefox has two prefs to control mixed content.
- security.mixed_content.block_active_content
- security.mixed_content.block_display_content