Use HTTPS for instances that support it

[legoktm]

Status

Ready for review; needs prod signature

Description

For instances that already redirect to HTTPS, have our ruleset also
point to HTTPS, avoiding one extra HTTP->HTTPS redirect.

Since this information isn't available from the directory, add it as an
optional field to onboarded.txt, which shouldn't be too much extra
maintenance given the few instances that use it.

Fixes #4.

Review Checklist

• Changes to onboarded.txt are accurate
• The file default.rulesets.TIMESTAMP.gz has been updated, extracting that file and inspecting the contents of the JSON file produces the expected rules
• The ruleset has been verified by modifying the HTTPS Everywhere configuration in a Tor Browser instance pointing to Path Prefix: https://raw.githubusercontent.com/freedomofpress/securedrop-https-everywhere-ruleset/$BRANCH_NAME
• index.html has been updated using ./update_index.sh

Post-Deployment Checklist

• Added/modified onion names have been updated in the SecureDrop Directory

[legoktm]

A far simpler approach would be to add a https column to onboarded.txt and use that. I initially dismissed that but given there are just 2 instances that need it, it seems pretty straightforward to maintain.

[legoktm]

Now updated to store and pull data from onboarded.txt instead of doing live checking.

will re-review with changes

[zenmonkeykstop]

Confirmed that the ruleset changes look consistent with the https option. A new signed ruleset has been added in a separate commit. Final review to follow to verify the rules work in TBB as expected.

[zenmonkeykstop]

(handing off to @nathandyer for live ruleset checks)

[nathandyer]

Happy to report everything worked correctly for me in the live tests, and that the Source Interfaces loaded using HTTPS.

Just a note about the test plan, no changes should be necessary in the directory itself.