diff --git a/4.1-Extensions.md b/4.1-Extensions.md
index 773c7bc..6f906b3 100644
--- a/4.1-Extensions.md
+++ b/4.1-Extensions.md
@@ -18,6 +18,8 @@ These are all, where applicable, best configured to `deny-all` and whitelist.
* :exclamation: uBlock Origin users should add the [following rules](https://github.com/Synzvato/decentraleyes/wiki/Frequently-Asked-Questions#for-umatrix-and-ublock-origin-non-easy-mode-users)
* [CSS Exfil Protection](https://addons.mozilla.org/firefox/addon/css-exfil-protection/) | [GitHub](https://github.com/mlgualtieri/CSS-Exfil-Protection) | [Homepage + Test](https://www.mike-gualtieri.com/css-exfil-vulnerability-tester)
* [HTTPS Everywhere](https://addons.mozilla.org/firefox/addon/https-everywhere/) ✔ [Privacy](https://www.eff.org/code/privacy/policy) | [GitHub](https://github.com/EFForg/https-everywhere)
+* [HTTPS by default](https://addons.mozilla.org/firefox/addon/https-by-default/) | [GitHub](https://github.com/Rob--W/https-by-default)
+ * changes the behavior for schemeless URLs typed in the location bar
* [Smart Referer](https://addons.mozilla.org/firefox/addon/smart-referer/) | [GitHub](https://github.com/meh/smart-referer)
* [Header Editor](https://addons.mozilla.org/firefox/addon/header-editor/) | [GitHub](https://github.com/FirefoxBar/HeaderEditor)
* Allows you to run [Rules](https://github.com/ghacksuserjs/ghacks-user.js/wiki/4.2.4-Header-Editor) to modify headers such as blocking ETags
@@ -37,8 +39,6 @@ These are all, where applicable, best configured to `deny-all` and whitelist.
* Yes, there is a FF57+ non-legacy version. For FF57+, use uMatrix in some hardened configuration instead. This *may* not be a total replacement, as NoScript *might* offer some unique protections debatable: eg: ClearClick, ABE [see here](https://github.com/ghacksuserjs/ghacks-user.js/wiki/4.2.3-uMatrix), XSS really debatable
* :green_heart: [Greasemonkey 3.17](https://addons.mozilla.org/firefox/addon/greasemonkey/versions/3.17) ✔ [Privacy](https://addons.mozilla.org/firefox/addon/greasemonkey/privacy/) | [GitHub](https://github.com/greasemonkey/greasemonkey)
* Yes, there is a FF57+ non-legacy version. For FF57+, use Violentmonkey.
-* :purple_heart: [HTTPS by default](https://addons.mozilla.org/firefox/addon/https-by-default/) | [GitHub](https://github.com/Rob--W/https-by-default) | [Extension Info](https://github.com/Rob--W/https-by-default/issues/12) & [1370388](https://bugzilla.mozilla.org/show_bug.cgi?id=1370388)
- * changes the behavior for schemeless URLs typed in the location bar
* :purple_heart: [QuickJava](https://addons.mozilla.org/firefox/addon/quickjava/) | [GitHub](https://github.com/ThatOneGuyDotNet/QuickJava) | [Extension Info](https://github.com/ThatOneGuyDotNet/QuickJava/issues/44)
* Configurable toggle buttons for JS, ~~Java~~, Flash, images and more
* [No Resource URI Leak (clone)](https://raw.githubusercontent.com/earthlng/testpages/master/no_resource_uri_leak-1.1.1-an%2Bfx%2Bsm%2Btb.xpi) - see [#191](https://github.com/ghacksuserjs/ghacks-user.js/issues/191) | original [here](https://addons.mozilla.org/firefox/addon/no-resource-uri-leak/) breaks [`[`bug`]`](https://notabug.org/desktopd/no-resource-uri-leak/issues/14) in FF55+ | [Cannot be ported to WE](https://addons.mozilla.org/firefox/addon/no-resource-uri-leak/reviews/860958/)