【图】CheckMyHTTPS下载
【图】CheckMyHTTPS
【图】CheckMyHTTPS

CheckMyHTTPS

截图 详情 下载 评论

CheckMyHTTPS 详情

CheckMyHTTPS ensures that your secured WEB connections (‘HTTPS’ protocol) are not intercepted (neither decrypted, nor listened, nor modified).

When browsing on secured sites (“https://…” sites), you can check the security status by clicking on the extension icon (check).
– The icon is green : your connection is not compromised
– The icon is red : your connection is considered very risky (hijacked, modified, listened)

Technical details :
Normally, before encrypting an HTTPS connection, a secure website must prove its identity to your browser by sending it its security certificate. This certificate can be considered as an identity card issued by higher authorities (Certificate Authorities). There are several techniques of usurpation based on false certificates (false identity cards) or homographers (false names) to make you believe that a “pirate” site is the legitimate site you think you are visiting. These techniques allow pirate sites to retrieve your private information.
CheckMyHTTPS allows you to detect this type of practice, which can be implemented on open WI-FI access points (hotels, conference centres, stations, etc.) or even within your company via its outband firewall (SSL inspection). To detect this, the extension compares the certificate of the visited site that is received by your browser with the same certificate retrieved by an external “verification server” located on the Internet. If the certificates differ, the identity of the server can be considered as usurped (red icon).

Respect for privacy?
The CheckMyHTTPS extension requires only two parameters : The name of the visited website and the certificate received from it;
The external “verification server” only receives the name of the visited website. If you want, you can make this “verification server” yourself.

All explanations are detailed on the project website : https://checkmyhttps.net.

CheckMyHTTPS 中文

CheckMyHTTPS确保您的安全WEB连接 (‘HTTPS’ 协议) 不会被拦截 (既不解密,也不收听,也不修改)。

在安全站点 (“https://…” 站点) 上浏览时,您可以通过单击扩展图标 (检查) 来检查安全状态。
-图标为绿色: 您的连接未妥协
-图标为红色: 您的连接被认为非常有风险 (被劫持,修改,聆听)

技术细节:
通常,在加密HTTPS连接之前,安全网站必须通过向其发送其安全证书来向您的浏览器证明其身份。此证明可视为上级机关 (certificate authorities) 签发的身份证。有几种基于虚假证明 (假身份证) 或同性恋者 (假名) 的篡夺技术,使你相信 “海盗” 网站就是你认为你正在访问的合法网站。这些技术允许盗版网站检索您的私人信息。
CheckMyHTTPS允许您检测这种类型的做法,可以在开放的WI-FI接入点 (酒店,会议中心,车站等) 上实现,甚至可以通过其外防火墙 (SSL检查) 在您的公司内部实现。为了检测到这一点,扩展将浏览器接收到的被访问站点的证书与位于Internet上的外部 “验证服务器” 检索的相同证书进行比较。如果证书不同,服务器的身份可以被认为是usurped (红色图标)。

尊重隐私?
CheckMyHTTPS扩展只需要两个参数: 访问网站的名称和从中收到的证书;
外部 “验证服务器” 只接收被访问网站的名称。如果你愿意,你可以自己做这个 “验证服务器”。

所有解释都在项目网站上详细: https://checkmyhttps.net。

展开正文 ▼

应用下载

本地下载

更多类似

【图】Smart HTTPS
Smart HTTPS
29

Automatically changes HTTP protocol to HTTPS, and if loading encounters error, reverts it back to HTTP.

【图】SysAdmin Tools
SysAdmin Tools
11

Chrome Extension for Web Hosting Support Staffs and System Administrators. ( by ServerHealers )

【图】SSL Test
SSL Test
2

This extension will test the SSL status of the current page using ssllabs.com

【图】Certificate Info
Certificate Info
15

Shows TLS certificate info and validation level of the servers you connect. 显示所连接服务器的TLS证书信息和验证级别。

【图】HTTPS Protect
HTTPS Protect
65

使用HTTPS保護盡可能自動切換到安全HTTPS協議。 HTTPS Protect自動將數千個站點從不安全的“ http”切換到安全的“ https”。 HTTPS Protect保護您免受多種形式的監視,帳戶黑客攻擊和某些類型的審查。

【图】Watchdog
Watchdog
5

Dear CryptoPolice community! After a few months of concentrated work, we have some excellent news for you! Due to suf

相关评论(2)

Eric Hidle

Requires installing Python, which a user who is likely to be subject to SSL MITM attacks (for example in the workplace) is also likely not going to have administrative permissions or the ability to install it. The addon should be completely self-contained and not require elevated user privileges to install.

用户

Hello, We are also frustrated that Chrome does not yet support the TLS WebExtension API. An implementation proposal has been made but seems to be on hold (https://chromium-review.googlesource.com/c/chromium/src/+/644858). If you cannot install Python, you can use Firefox which does not require an extra script. Or try with a portable version of Python. Finally, if you are really unable to install/launch any software, you can do a manual check directly on the project website: https://checkmyhttps.net/info.php. Thanks for using CheckMyHTTPS (even with only two stars …) CheckMyHTTPS Team