Firefox 37 comes with HTTP encryption

[labbe5]

http://www.omgubuntu.co.uk/2015/03/fire ... w-features

Other changes include:
•HTTPS for secure searching on Bing
•Improved protection against site impersonation
•Support for encryption traffic over HTTP/2 AltSvc
•Media Source Extensions (MSE) API to allow native HTML5 playback on YouTube
•User availability improvements in Hello chat

An issues that caused mp4-encoded YouTube & Vimeo videos to appear entirely black on Linux machines has also been fixed. Kitties rejoice!

Opportunistic Encryption For Firefox

OE provides unauthenticated encryption over TLS for data that would otherwise be carried via clear text. This creates some confidentiality in the face of passive eavesdropping, and also provides you much better integrity protection for your data than raw TCP does when dealing with random network noise. The server setup for it is trivial.

Two simple steps to configure a server for OE
Install a TLS based h2 or spdy server on a separate port. 443 is a good choice . You can use a self-signed certificate if you like because OE is not authenticated.
Add a response header Alt-Svc: h2=":443" or spdy/3.1 if you are using a spdy enabled server like nginx.

For further reading on encryption over HTTP :

http://bitsup.blogspot.ca/2015/03/oppor ... refox.html

[8Geee]

Bing... M$'s evil twin. Cowtow to the giga-$ much?
How about 512-bit encryption instead.
Nah, selfie-certs way better.

[purple379]

Anyone know whether HTTPS Everwhere will continue to work? Are you saying all of HTTPS protocol is gone as well?

[8Geee]

No, if I read it right, this protocol takes unencrypted info on an encrypted page (yes that does happen), and applies encryption to it. Now all of the page is encrypted.

Its a step in the right direction security-wise, but not allowing such "mixed" pages, or the unsecure portion(s), has been a much better solution.