Filter list downloads require HTTPS now · 2019-05-24 04:00 by Manish Jethani
Starting with Adblock Plus 3.6 for Chrome, Firefox and Opera (and development builds as of 18.104.22.1680), the extension will no longer download filter lists over unencrypted HTTP (core#5). Any existing subscriptions with
http:// URLs will stop syncing. If you are a filter list maintainer affected by this change, you can migrate any of your current subscribers over by following the steps below:
- Start hosting over HTTPS: Unlike a few years ago, HTTPS is now widely adopted and easy to set up. You may need to get an SSL/TLS certificate for your server. Alternatively, you could go for one of the one-click solutions from any of the major CDN providers.
- Migrate existing subscribers: Once you have your filter list being served via an
://URL, the next step would be to migrate your existing subscribers. In order to do this, add the special comment
! Redirect: <URL>at the top of the old filter list (still being served over unencrypted HTTP!), replacing the
<URL>part with the new subscription URL. For example, if your old list is at
http://example.com/list.txtand you have made the new list available at
example.com/list.txt, the comment would be
! Redirect: http
example.com/list.txt. The next time the extension attempts to synchronize the old subscription, it will automatically replace it with the new one.
In order to make the transition as smooth as possible for any filter list maintainers still on unencrypted HTTP, we are going to allow a period of at least 31 days starting today before we make the switch in the release version.
As always, any feedback about this change is welcome.