English
See more
Automatic security, browse encrypted.
Latest Version
Version
2.0.5
Update
November 20, 2020
Size
49.2KiB
Developer
kbit.dk
Category
Users
20,000+ 
Rating
4.17526 ★
Manifest Version
2
Web Store Status
Extension ID
Languages Support
Permissions
*://*/
Tabs
WebRequest
WebRequestBlocking
See more
Tabs
WebRequest
WebRequestBlocking
KB SSL Enforcer Extension
This extension enforces encryption for websites that support it as much as currently possible in Chrome. This gives you added security and privacy for your browsing automatically and transparently. This is particularly important on insecure networks, such as public wifi in e.g. coffee shops and hotels.
It is not completely secure against the infamous Firesheep, but it does minimize the risk greatly. See the section on complete enforcement for technical details and more on when this will be possible.
Features:
- Automatically detects if a site supports SSL (TLS) and enforces all subsequent requests to be over SSL
- As soon as a domain is set to be enforce, the browser will not send any unencrypted requests for that domain (unless the site deliberately enforces not using encryption, see the section on complete enforcement)
- Flexible options for overriding the auto-detection
- Caches which sites support SSL (respects incognito mode)
- Open source (GPLv2 or later)
Changelog:
https://github.com/kbitdk/kbsslenforcer/blob/master/Changelog.md
Issue tracker:
https://github.com/kbitdk/kbsslenforcer/issues
Complete enforcement:
Due to Chrome limitations KB SSL Enforcer detects SSL on the very first visit to a page and is unable to block the unencrypted request from going through while this is happening. It will let that page load and if it is detected to support SSL, all subsequent requests to that domain will be enforced automatically to use SSL before the unencrypted request is sent from the browser.
The unencrypted request only goes through on the very first page visit where it's detecting SSL support. The setting will be saved and survives reboots and all. The only way to stop enforcing SSL is to manually set it to ignore SSL on that domain or if the extension detects that the site is trying to enforce an unencrypted connection and therefore backs off by not enforcing it from then on.
This first insecure request could send a cookie in the clear, which would give anyone with tools like Firesheep an opportunity to use your account on that site. But this only happens if they catch it during that first request and if it includes sensitive information, such as your logged in session. All subsequent requests, even after restarting the browser and rebooting the computer, will enforce encryption.
Permissions:
The manifest file states the permissions requested:
https://github.com/kbitdk/kbsslenforcer/blob/master/chrome%20extension/manifest.json
* *://*/
* This is for accessing pages on all domains and both with and without SSL
* tabs
* This is for accessing information on whether a tab is in incognito, so it can be respected
* webRequest
* This is for intercepting the unencrypted requests and detecting whether the site doesn't support encryption by redirecting encrypted requests to the unencrypted site
* webRequestBlocking
* This is for blocking the unencrypted requests while determining whether it needs to be redirected
The project is open source and any scrutiny of the code or the extension's behavior is encouraged. If you have any comments, please open an issue on the issue tracker:
https://github.com/kbitdk/kbsslenforcer/issues
Feedback:
Any questions or feedback are welcome in the issue tracker linked above, which has features to manage and notify people of any issues, so they can be fixed and we can all have a better extension. Please keep the user reviews section of this page to just reviews. Thanks.
Developed by KB IT:
https://kbit.dk
Read more
It is not completely secure against the infamous Firesheep, but it does minimize the risk greatly. See the section on complete enforcement for technical details and more on when this will be possible.
Features:
- Automatically detects if a site supports SSL (TLS) and enforces all subsequent requests to be over SSL
- As soon as a domain is set to be enforce, the browser will not send any unencrypted requests for that domain (unless the site deliberately enforces not using encryption, see the section on complete enforcement)
- Flexible options for overriding the auto-detection
- Caches which sites support SSL (respects incognito mode)
- Open source (GPLv2 or later)
Changelog:
https://github.com/kbitdk/kbsslenforcer/blob/master/Changelog.md
Issue tracker:
https://github.com/kbitdk/kbsslenforcer/issues
Complete enforcement:
Due to Chrome limitations KB SSL Enforcer detects SSL on the very first visit to a page and is unable to block the unencrypted request from going through while this is happening. It will let that page load and if it is detected to support SSL, all subsequent requests to that domain will be enforced automatically to use SSL before the unencrypted request is sent from the browser.
The unencrypted request only goes through on the very first page visit where it's detecting SSL support. The setting will be saved and survives reboots and all. The only way to stop enforcing SSL is to manually set it to ignore SSL on that domain or if the extension detects that the site is trying to enforce an unencrypted connection and therefore backs off by not enforcing it from then on.
This first insecure request could send a cookie in the clear, which would give anyone with tools like Firesheep an opportunity to use your account on that site. But this only happens if they catch it during that first request and if it includes sensitive information, such as your logged in session. All subsequent requests, even after restarting the browser and rebooting the computer, will enforce encryption.
Permissions:
The manifest file states the permissions requested:
https://github.com/kbitdk/kbsslenforcer/blob/master/chrome%20extension/manifest.json
* *://*/
* This is for accessing pages on all domains and both with and without SSL
* tabs
* This is for accessing information on whether a tab is in incognito, so it can be respected
* webRequest
* This is for intercepting the unencrypted requests and detecting whether the site doesn't support encryption by redirecting encrypted requests to the unencrypted site
* webRequestBlocking
* This is for blocking the unencrypted requests while determining whether it needs to be redirected
The project is open source and any scrutiny of the code or the extension's behavior is encouraged. If you have any comments, please open an issue on the issue tracker:
https://github.com/kbitdk/kbsslenforcer/issues
Feedback:
Any questions or feedback are welcome in the issue tracker linked above, which has features to manage and notify people of any issues, so they can be fixed and we can all have a better extension. Please keep the user reviews section of this page to just reviews. Thanks.
Developed by KB IT:
https://kbit.dk
Source Manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx",\t"name":\t"KB SSL Enforcer",\t"version":\t"2.0.5",\t"description":\t"Automatic security, browse encrypted.",\t"manifest_version":\t2,\t"permissions":\t["*://*/", "tabs", "webRequest", "webRequestBlocking"],\t"icons":\t{ "128":\t"icon.png" },\t"options_page":\t"options.html",\t"minimum_chrome_version":\t"17",\t"browser_action":\t{\t "default_icon":\t"icon19.png",\t "default_title":\t"KB SSL Enforcer",\t "default_popup":\t"popup.html"\t},\t"background":\t{\t "scripts":\t["background.js"]\t}}
Read more
Similar Extensions
Certificate Info 20,000+ 20 ★ 18.09KiB
SKN SSL Enforcer 20,000+ 13 ★ 75.28KiB
Disconnect 20,000+ 3135 ★ 1017KiB
SSL Grade 20,000+ 14 ★ 56.41KiB
Force HTTPS (SSL/TLS) 20,000+ 5 ★ 23.24KiB
ScriptSafe 20,000+ 1720 ★ 751KiB
Smart HTTPS 20,000+ 31 ★ 115KiB
SSL to TLS 20,000+ 5 ★ 3.51KiB
Privacy Guardr 20,000+ 16 ★ 410KiB
Privacy Manager 20,000+ 166 ★ 90.21KiB
HTTPS Finder 20,000+ 25 ★ 319KiB
SSL Checker 20,000+ 15 ★ 87.32KiB
IronVest 20,000+ 4404 ★ 10.78MiB
uMatrix 20,000+ 810 ★ 1.39MiB
SSL/TLS安全评估报告 20,000+ 10 ★ 412KiB
TLSA Validator 20,000+ 23 ★ 95.55KiB
Decentraleyes 20,000+ 226 ★ 6.92MiB
ScriptBlock 20,000+ 445 ★ 161KiB
NoWall proxy (by NoWall) 20,000+ 60 ★ 16.28KiB
uBO-Scope 20,000+ 35 ★ 159KiB
Privacy Cleaner 20,000+ 83 ★ 7.82MiB
Proxxy 20,000+ 70 ★ 41.07KiB
UPPERSAFE 20,000+ 37 ★ 16.98KiB
Zalmos Web Proxy 20,000+ 37 ★ 20.3KiB
User reviews
Reynard (ID: 000000a1e011b368) Voted 5 ★ - Updated 11/28/2021
Gianni F (ID: 000000ff940b1eea) Voted 5 ★ - Updated 04/26/2021
Алексей путенихин (Юрьевич) (ID: 0000004f7ab66d41) Voted 5 ★ - Updated 03/29/2018
Ilya Stroganov (ID: 000000edb30e7235) Voted 5 ★ - Updated 04/14/2017
Eddie Atter (ID: 00000004450be582) Voted 5 ★ - Updated 01/30/2017
Latest Updates
Top Rated
Hola VPN - Your Website Unblocker
Adblock for Youtube™
AdBlock — block ads across the web
Video Downloader Professional
Adblock Plus - free ad blocker
Stands AdBlocker
Evernote Web Clipper
Argent X - Starknet Wallet
Touch VPN - Secure and unlimited VPN proxy
Pop up blocker for Chrome™ - Poper Blocker