Extra caution is recommended when installing recently uploaded/updated scripts (read more)
Be sure you trust any scripts you install
Force HTTPS for GMail, GCal, and GDocs
Modify Google corner bookmarks to use HTTPS for GMail, GCal, and GDocs
Anmar Mansur
Script's author
|
Victor, granted your script works in more cases than my Force HTTPS for GMail, GCal, and GDocs script, but yours only modifies the protocol to secure HTTPS after the page has loaded in non-secure HTTP and the damage was already done. In a man in the middle attack scenario, the attacker will obtain access to an authenticated session with your Google service of choice, while you unknowingly continue to use the service over HTTPS feeling (falsely) secure. I strongly suggest you modify your script or take it down immediately. |
Víctor Sánchez
Scriptwright
|
Related script: http://userscripts.org/scripts/show/14161 |
Jonny
User
|
Good script! |
You could comment on this script if you were logged in.
