Skip to content
master
Switch branches/tags
Code

Latest commit

 

Git stats

Files

Permalink
Failed to load latest commit information.
Type
Name
Latest commit message
Commit time
 
 
 
 
 
 
 
 
 
 

DNSSEC-HSTS Native Component

DNSSEC-HSTS is a WebExtension that upgrades HTTP to HTTPS (simulating HSTS) for websites that support DANE (i.e. websites that list a TLSA record for TCP port 443). This is a reasonably good heuristic for preventing sslstrip-style attacks.

This repository is for the native (Go) component of DNSSEC-HSTS.

Installation

Firefox for GNU/Linux

go get github.com/namecoin/dnssec-hsts-native/src/dnssec_hsts
sudo cp $(go env GOPATH)/src/github.com/namecoin/dnssec-hsts-native/setup/org.namecoin.dnssec_hsts.json /usr/lib64/mozilla/native-messaging-hosts/
sudo cp $(go env GOPATH)/bin/dnssec_hsts /usr/bin/

Then install the WebExtensions component of DNSSEC-HSTS.

Tor Browser for GNU/Linux

Substitute your own Tor Browser path here:

go get github.com/namecoin/dnssec-hsts-native/src/dnssec_hsts
sudo cp $(go env GOPATH)/src/github.com/namecoin/dnssec-hsts-native/setup/org.namecoin.dnssec_hsts.json tor-browser_en-US/Browser/TorBrowser/Data/Browser/.mozilla/native-messaging-hosts/
sudo cp $(go env GOPATH)/bin/dnssec_hsts /usr/bin/

Then install the WebExtensions component of DNSSEC-HSTS.

Other

On other OS's, it's probably similar but I haven't tried. Check the WebExtensions docs or something.

Other browsers might or might not work, I haven't tried. Check the WebExtensions docs or something.

About

Upgrade HTTP to HTTPS (simulating HSTS) for websites that support DANE. (Native component.)

Resources

License

Stars

Watchers

Forks

Packages

No packages published

Languages