Merlin
HTTPS+ Checker

HTTPS+ Checker

Verification of security mechanisms complementary to HTTPS.

HTTPS+ Checker promo image
What is HTTPS+ Checker?

HTTPS+ Checker is a Firefox add-on that allows you to quickly check if a website has HSTS, HPKP, DANE / TLSA, and DNSSEC security mechanisms in place. It verifies these complementary security measures without validating if your session uses them.

Download
Merlin
Stats
Stats date:
By: Beu
Users: 56 ▲ 1
Rating: 3.38 (8)
Version: 0.0.3 (Last updated: 2018-07-04)
Creation date: 2018-04-30
Weekly download count: NaN
Firefox on Android: Yes
Manifest version: 2
Permissions:
  • tabs
  • storage
  • webRequest
  • <all_urls>
Size: 13.16K
Email: Click to see
Risk impact: High risk impact
Risk likelihood: Low risk likelihood

Chrome-Stats Rank

# 11915 ▲ 13
Other rankings
#206 in spell checker keyword 31 ▲ 3 #234 in checker keyword 47 ▲ 2

Other platforms

Not available on Chrome
Not available on Edge
Merlin
Summary
Analyze keywords

The extensions quickly check if the website has HSTS, HPKP, DANE / TLSA and DNSSEC (but do not validate if your session uses them).

User reviews
Sometimes it works, sometimes it does not for the same URL. Not stable at all. Plugin seems to work ok for getting the results, it is the site that sends the results that has the problems and needs to be updated.
by Firefox user 14134753, 2019-06-21
To Aelisya and bigon, if you have Extension source viewer you can see (Firefox user 13857193)s code. This isn't spyware and does connects to securely... https://httpspluschecker.virtit.fr CODE: if (url.protocol === "http:" || url.protocol === "https:") { console.log("onGot : " + API) var host = url.hostname; xhr.open('GET', API + host, false); xhr.send(); The addon does what it says and is safe!
by Dewnan, 2019-01-19
Be aware that this module contacts an external non-https server to do the validation, this is a big no-no for me as this will lead to information being leaked.
by bigon, 2018-09-17
View all user reviews
Safety
Risk impact

HTTPS+ Checker is risky to use as it requires a number of sensitive permissions that can potentially harm your browser and steal your data. Exercise caution when installing this add-on. Review carefully before installing. We recommend that you only install HTTPS+ Checker if you trust the publisher.

Risk likelihood

HTTPS+ Checker has earned a fairly good reputation and likely can be trusted.

Upgrade to see risk analysis details
Screenshots
HTTPS+ Checker