IceCat: HTTPS Every-where becomes HTTPS No-where :-P

IceCat: HTTPS Every-where becomes HTTPS No-where :-P

[Raghav Gururajan]

[-- Attachment #1: Type: text/plain, Size: 663 bytes --]

Hello Guix and GNUzilla!

P.S. Mark, please don't feel pressured. I am just sumbmitting the issue
for awareness and tracking. :-)

I was using 'HTTPS Everywhere' add-on, with enabled https-only rule.

After v68 upgrade, the icon disappears from the tool bar and https-only 
rule was not in effect as the browser connects to http sites without
warning. But the thing is, under 'extensions' of browser settings, the
add-on is there and shows as enabled. Then when I disable and re-enable 
the add-on, the icon appears and https-only rule becomes in effect.
Everytime I restart the browser, the above situation happens all over
again.

Regards,
RG.

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 488 bytes --]

Re: IceCat: HTTPS Every-where becomes HTTPS No-where :-P

[Raghav Gururajan]

[-- Attachment #1: Type: text/plain, Size: 352 bytes --]


> Obviously these are very severe problems, and I will look into them
> as
> soon as I can.

Would it be better to reverse the version just before 68?

I remember you mentioned something about security fix in the 68
release; may be for now, it would be better to use the older version
with only the security patch from v68?

Regards,
RG.

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 488 bytes --]

bug#38087: IceCat: HTTPS Every-where becomes HTTPS No-where :-P

[Mark H Weaver]

Hi Raghav,

Raghav Gururajan <raghavgururajan@disroot.org> wrote:
> Would it be better to reverse the version just before 68?
>
> I remember you mentioned something about security fix in the 68
> release; may be for now, it would be better to use the older version
> with only the security patch from v68?

It's not feasible for us to do this, because the underlying code has
changed too much between versions 60.x and 68.x.

Also, I just noticed that you cross-posted this bug report to both
bug-gnuzilla and bug-guix.  Please do not cross-post.  In this case, the
bug is not specific to Guix, so I will close the Guix bug.  Follow-ups
on this bug should go to <bug-gnuzilla@gnu.org> only.

      Thanks,
        Mark

bug#38087: IceCat: HTTPS Every-where becomes HTTPS No-where :-P

[Raghav Gururajan]

[-- Attachment #1: Type: text/plain, Size: 597 bytes --]

> It's not feasible for us to do this, because the underlying code has
> changed too much between versions 60.x and 68.x.

I undderstand. Would it be possible to keep the old version available
along sise new version? User can use either or both versions, using
profiles.

> Also, I just noticed that you cross-posted this bug report to both
> bug-gnuzilla and bug-guix.  Please do not cross-post.  In this case,
> the
> bug is not specific to Guix, so I will close the Guix bug.  Follow-
> ups
> on this bug should go to <bug-gnuzilla@gnu.org> only.

OOPS! My bad.

Regards,
RG.

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 488 bytes --]

bug#38087: IceCat: HTTPS Every-where becomes HTTPS No-where :-P

[Mark H Weaver]

Hi Raghav,

> P.S. Mark, please don't feel pressured. I am just sumbmitting the issue
> for awareness and tracking. :-)

I appreciate these reports, thank you!

> I was using 'HTTPS Everywhere' add-on, with enabled https-only rule.
> 
> After v68 upgrade, the icon disappears from the tool bar and https-only
> rule was not in effect as the browser connects to http sites without
> warning. But the thing is, under 'extensions' of browser settings, the
> add-on is there and shows as enabled. Then when I disable and re-enable
> the add-on, the icon appears and https-only rule becomes in effect.
> Everytime I restart the browser, the above situation happens all over
> again.

Thank you for this.  There are definitely some problems with extensions
in the unofficial IceCat preview.  I've also noticed behavior that's
consistent with what you've described above, and not only with HTTPS
Everywhere.  At one point I noticed that although I had LibreJS
installed and enabled, its icon was no longer visible in the navigation
bar, and nonfree JavaScript was being run.

Obviously these are very severe problems, and I will look into them as
soon as I can.  Unfortunately, due to other urgent matters occupying my
attention, it will be at least a week, and possibly two, before I can
investigate.

If anyone is able to investigate these issues in the meantime, I would
be grateful.  Proposed fixes would of course be ideal, but sharing any
observations or proposals that might move the process along would be
most welcome.

      Thanks,
        Mark