CheckMyHTTPS ensures that your HTTPS connections are not hijacked and therefore not listened to.

Latest Version

Version
5.7.0
Update
May 9, 2023
Size
75.92KiB
Developer
Category
Users
614
Rating
4.25 ★
Manifest Version
2
Web Store Status
Languages Support
English
Français
See more
Permissions
Downloads
NativeMessaging
Notifications
Storage
Tabs
See more

CheckMyHTTPS Extension

CheckMyHTTPS ensures that your secured WEB connections ('HTTPS' protocol) are not intercepted (neither decrypted, nor listened, nor modified).

When browsing on secured sites (\"https://...\" sites), you can check the security status by clicking on the extension icon (check).
- The icon is green: your connection is not compromised
- The icon is red: your connection is considered very risky (hijacked, modified, listened)

Technical details:
Normally, before encrypting an HTTPS connection, a secure website must prove its identity to your browser by sending it its security certificate. This certificate can be considered as an identity card issued by higher authorities (Certificate Authorities). There are several techniques of usurpation based on false certificates (false identity cards) or homographers (false names) to make you believe that a \"pirate\" site is the legitimate site you think you are visiting. These techniques allow pirate sites to retrieve your private information.
CheckMyHTTPS allows you to detect this type of practice, which can be implemented on open WI-FI access points (hotels, conference centres, stations, etc.) or even within your company via its outband firewall (SSL inspection). To detect this, the extension compares the certificate of the visited site that is received by your browser with the same certificate retrieved by an external \"verification server\" located on the Internet. If the certificates differ, the identity of the server can be considered as usurped (red icon).

Respect for privacy?
The CheckMyHTTPS extension requires only two parameters : The name of the visited website and the certificate received from it;
The external \"verification server\" only receives the name of the visited website. If you want, you can make this \"verification server\" yourself.

All explanations are detailed on the project website: https://checkmyhttps.net.
Read more

Source Manifest.json

{ "background": { "page": "background.html" }, "browser_action": { "browser_style": false, "default_icon": { "128": "images/icon.png" } }, "default_locale": "en", "description": "__MSG_extensionDescription__", "icons": { "128": "images/icon.png" }, "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaqK/LcMIdkzflE6LlaKskw1tESqq3NhJhyQr923GMzn7dXeF3f1cXTHdqfG/eOVsd+dLc3YB3GBKBsRnWi4tqX09ZAejgBoL5YJfQyR9ZAORZsCRN7cViL/Gp9hNz8kPWipjhf90pwaDeTsk9ClJHOjwShC2R1VVog67QMelKtuRQgsi9IDTbU+pL27HCflBgsVN9rI0On/4cezzFh6wvB0/N2EEdywQXTbGvSH1bXssHVcJvjtNLtDfE56kzsNjAb6DpHXOEoTHpmkTqibMuqTh/wpFvQ1G225+CJIn7OG1yiGnfxzhaZwjLs4U0ElBdFHUuDSkcltvMqFs0IkGwIDAQAB", "manifest_version": 2, "name": "CheckMyHTTPS", "options_ui": { "browser_style": true, "open_in_tab": false, "page": "options/options.html" }, "permissions": [ "downloads", "nativeMessaging", "notifications", "storage", "tabs" ], "update_url": "https://clients2.google.com/service/update2/crx", "version": "5.7.0"}
Read more

Similar Extensions

icon

Certificate Info Extension · Developer Tools 614 20 ★ 18.09KiB

icon

SSL Server Test Extension · Developer Tools 614 1 ★ 11.85KiB

icon

SSL Grade Extension · Developer Tools 614 14 ★ 56.41KiB

icon

SSL Checker Extension · Productivity 614 15 ★ 87.32KiB

icon

HTTP - HTTPS Toggle Extension · Developer Tools 614 2 ★ 14.69KiB

icon

HTTPS Finder Extension · Social & Communication 614 25 ★ 319KiB

icon

SSL to TLS Extension · Social & Communication 614 5 ★ 3.51KiB

icon

TLSA Validator Extension · Social & Communication 614 23 ★ 95.55KiB

icon

HTTP to HTTPS Extension · Productivity 614 4 ★ 98.47KiB

icon

Cloudpath Certificate Generator Extension · Accessibility 614 11 ★ 270KiB

icon

stay https Extension · Productivity 614 3 ★ 19.9KiB

icon

TLS/SSL checker and reminder - ElevenGuard Extension · Developer Tools 614 0 ★ 16.8KiB

icon

Force HTTPS for all traffic Extension · Productivity 614 0 ★ 68.28KiB

icon

Policy Control Extension · Productivity 614 3 ★ 48.47KiB

icon

Force HTTPS (SSL/TLS) Extension · Productivity 614 5 ★ 23.24KiB

icon

Smart HTTPS Extension · Productivity 614 31 ★ 115KiB

icon

Ignore Google Scripts Extension · Productivity 614 3 ★ 18.68KiB

icon

Block Unreachable Scripts Extension · Productivity 614 6 ★ 11.06KiB

icon

Certificate Enrollment for ChromeOS Extension · Productivity 614 402 ★ 636KiB

icon

ServerHealers SysAdmin Tools Extension · Developer Tools 614 11 ★ 31.91KiB

icon

Origin Requests Only (Firewall) Extension · Productivity 614 12 ★ 102KiB

icon

Privacy Guard & Manager Extension · Productivity 614 2 ★ 34.69KiB

icon

Scripter debugger extension Extension · Developer Tools 614 2 ★ 1.04MiB

icon

SKN SSL Enforcer Extension · Productivity 614 13 ★ 75.28KiB

User reviews

icon

Mohamed Anjum (ID: 000000c6402ed8dd) Voted 5 ★ - Updated 11/12/2021 Installed on my Laptop since I use it out with public hotspots. Works well. (12/11/2021)

icon

Eric Hidle (ID: 0000003f2393841a) Voted 2 ★ - Updated 01/30/2019 Requires installing Python, which a user who is likely to be subject to SSL MITM attacks (for example in the workplace) is also likely not going to have administrative permissions or the ability to install it. The addon should be completely self-contained and not require elevated user privileges to install.