HTTP Nowhere

This extension upgrades non-secure connections (HTTP) to secure (HTTPS).
What is HTTP Nowhere?
"HTTP Nowhere" is a simple Chrome extension that upgrades non-secure web connections to secure (HTTPS) for enhanced security while browsing.

Extension stats

Users: 16 ▲ 1
Version: 1.1 (Last updated: 2021-08-18)
Creation date: 2021-07-26
Risk impact: Very low risk impact
Risk likelihood: Low risk likelihood
Manifest version: 3
Permissions:
  • declarativeNetRequest
Size: 76.25K

Other platforms

Not available on Firefox
Not available on Edge
Want to check extension ranking and stats more quickly for other Chrome extensions? Install Chrome-Stats extension to view Chrome-Stats data as you browse the Chrome Web Store.

Extension summary

HTTP Nowhere upgrades non-secure web connections to secure: it upgrade HTTP URLs to HTTPS.

If the web site does not correctly support HTTPS, Chrome will refuse to connect (with the usual interstitial warning page). Thus, this extension will make it hard to view some web sites.

For maximum safety, you should also turn on Chrome’s Secure DNS (DNS over HTTPS) feature. There is no way (yet?) for an extension to turn this on for you, so you have to do it manually. To do so, go to the dots menu → Settings → Security, and then scroll down to Use Secure DNS. Select a provider or fill in your own. (You can also get to this setting by navigating to the URL chrome://settings/security?search=dns.)

HTTP Nowhere is designed to be as simple as possible, and has no functionality other than upgrading connections. This is easy to see in the very short and simple implementation.

It needs no special permissions or access to the web pages you view. There is nothing to configure; HTTP Nowhere is either on or off.

Extension safety

Risk impact

HTTP Nowhere does not require any sensitive permissions.

Risk likelihood

HTTP Nowhere has earned a fairly good reputation and likely can be trusted.

Upgrade to see risk analysis details

Similar extensions

Here are some Chrome extensions that are similar to HTTP Nowhere: