GitHub - checkmyhttps/checkmyhttps: User-friendly add-on that allows you to check if your encrypted web traffic (SSL/TLS) towards secured Internet servers (HTTPS) is not intercepted (being listened to). · GitHub
Skip to content

checkmyhttps/checkmyhttps

Folders and files

Repository files navigation

CheckMyHTTPS

CheckMyHTTPS ensures that your secured WEB connections (HTTPS) are not intercepted (neither decrypted, nor listened, nor modified). We have created several simple tools that use this method : Firefox & Chromium-based WEB browser add-ons and an Android app.

Apps

Firefox Firefox extension
Chrome Chrome extension
Edge Edge extension
Opera Opera extension
Android Download from Google Play

How it works?

When browsing on secured sites ("https://..." websites), you can check the security status by clicking on the extension icon .

  • The icon is green : your connection is not compromised;
  • The icon is red : your connection is considered very risky (hijacked, modified, listened);
  • The icon is gray : the verification is impossible (check server is unreachable, network error);
  • The icon is black : the verification is in progress.

Security Features

Security feature Firefox Chrome Edge Opera  Android  Manual check page
TLS Man in the middle attack protection
Check server verified by signature -
Domain name homograph attack protection -
Link Deep Inspection  - - - - -

Repository structure

.
├── Chromium/        # Chromium-based browser extension
├── Mobile_App/      # Android app
├── server-php/      # Check server (backend)
└── webextension/    # Firefox extension

Respect for privacy:

The CheckMyHTTPS extension requires to send only two parameters to the check server :

  • The domain name of the visited website;
  • The IP address of the visited website. You have free choice regarding the website to check.

Moreover, we give you the possibility to be free regarding the check server as you can make and host your own.

More details:

A secure website (HTTPS) justifies its identity with your browser by sending a certificate validated by a recognized certification authority. Interception techniques, to be able to work, dynamically forge false certificates (a bit like a fake identity card). The method we propose to you, verifies that the certificate you receive is the one issued by the server.

All explanations are detailed on the https://checkmyhttps.net project website.


Authors

Original idea & project management: Richard REY (aka Rexy)

Previous developers : Sylvain BOUTEILLER, Adrien SCHNEIDER, Cyril LEBLAY, Raphaël PION, Hugo MEZIANI, Tom HOUDAYER, Catarina DE FARIA, Quentin COLLART, Mathis CADIO, Ghassen LAHDHIRI, Ahmed BOUSRIH, Mehdi BELAJOUZA

Logo: Clément SICCARDI

LICENSE

GPL v3

About

User-friendly add-on that allows you to check if your encrypted web traffic (SSL/TLS) towards secured Internet servers (HTTPS) is not intercepted (being listened to).

Topics

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

Contributors