Skip to content
Projects

checkmyhttps/checkmyhttps

View on GitHub

checkmyhttps/checkmyhttps has 63 GitHub stars and 12 forks. GitHot measured 0 stars in 24 hours, 0 in 7 days, and -2 in 15 days. Last checked 2026-11-15 06:28 UTC. Last push 2026-07-29.

How these counts are measured

63 stars12 Forks

What you can do

  • TLS Man in the middle attack protection - ✅ - ✅ - ✅ - ✅ - ✅ - ✅
  • Check server verified by signature - ✅ - ✅ - ✅ - ✅ - ✅ - -
  • Domain name homograph attack protection - ✅ - ✅ - ✅ - ✅ - ✅ - -
  • Link Deep Inspection - ✅ - - - - - - - - - -

Measured star growth

in 24h
0
in 7 days
0
in 15 days
-2
in 1 month
Collecting history

Net star changes over overlapping periods, not daily totals. Missing measurements are left blank. Stars measure attention, not software quality.

About

User-friendly add-on that allows you to check if your encrypted web traffic (SSL/TLS) towards secured Internet servers (HTTPS) is not intercepted (being listened to).

Security

README.md

Original

CheckMyHTTPS

CheckMyHTTPS ensures that your secured WEB connections (HTTPS) are not intercepted (neither decrypted, nor listened, nor modified). We have created several simple tools that use this method : Firefox & Chromium-based WEB browser add-ons and an Android app.

Apps

Firefox Firefox extension
Chrome Chrome extension
Edge Edge extension
Opera Opera extension
Android Download from Google Play

How it works?

When browsing on secured sites ("https://..." websites), you can check the security status by clicking on the extension icon .

  • The icon is green : your connection is not compromised;
  • The icon is red : your connection is considered very risky (hijacked, modified, listened);
  • The icon is gray : the verification is impossible (check server is unreachable, network error);
  • The icon is black : the verification is in progress.

Security Features

Security feature Firefox Chrome Edge Opera Android Manual check page
TLS Man in the middle attack protection ✅ ✅ ✅ ✅ ✅ ✅
Check server verified by signature ✅ ✅ ✅ ✅ ✅ -
Domain name homograph attack protection ✅ ✅ ✅ ✅ ✅ -
Link Deep Inspection ✅ - - - - -

Repository structure

.
├── Chromium/        # Chromium-based browser extension
├── Mobile_App/      # Android app
├── server-php/      # Check server (backend)
└── webextension/    # Firefox extension

Respect for privacy:

The CheckMyHTTPS extension requires to send only two parameters to the check server :

  • The domain name of the visited website;
  • The IP address of the visited website. You have free choice regarding the website to check.

Moreover, we give you the possibility to be free regarding the check server as you can make and host your own.

More details:

A secure website (HTTPS) justifies its identity with your browser by sending a certificate validated by a recognized certification authority. Interception techniques, to be able to work, dynamically forge false certificates (a bit like a fake identity card). The method we propose to you, verifies that the certificate you receive is the one issued by the server.

All explanations are detailed on the https://checkmyhttps.net project website.

Authors

Original idea & project management: Richard REY (aka Rexy)

Previous developers : Sylvain BOUTEILLER, Adrien SCHNEIDER, Cyril LEBLAY, Raphaël PION, Hugo MEZIANI, Tom HOUDAYER, Catarina DE FARIA, Quentin COLLART, Mathis CADIO, Ghassen LAHDHIRI, Ahmed BOUSRIH, Mehdi BELAJOUZA

Logo: Clément SICCARDI

LICENSE

GPL v3