Welcome to Firefox Add-ons.
Choose from thousands of extra features and styles to make Firefox your own.Close
A simple add-on to provide a modal dialog when the user clicks on a password input field that will transmit insecurely over a non-HTTPS connection. Designed to offer some protection against Man-In-The-Middle attacks like SSL Strip.
About this Add-on
1. Click or give focus to a password input field that is affiliated with a form that will submit data over an unencrypted connection.
2. When the user submits a form that contains a password input and it will submit over an unencrypted HTTP connection.
This was designed as a potential counter to the SSL Strip man-in-the-middle attack designed to induce the user to transmit credentials over an unencrypted connection.
This is our first Firefox extension. I may update it as we learn better ways to implement things. Let us know if you find any bugs.