[106189] in cryptography@c2.net mail archive
Re: Fingerprint Firefox Plugin?
daemon@ATHENA.MIT.EDU (Dave Howe)
Wed Oct 24 09:34:50 2007
Date: Wed, 24 Oct 2007 08:28:05 +0100
From: Dave Howe <DaveHowe@gmx.co.uk>
To: cryptography@metzdowd.com
In-Reply-To: <000301c81548$c5f0cb60$d10110ac@Aculab.com>
Arcane Jill wrote:
> Can anyone tell me... is there a Firefox plugin which allows one to
> view the fingerprint of the SSL certificate of each page you visit
> (e.g. in the status bar or address bar or something)?
Never needed one. The hoops involved aren't THAT large, at least in
the version I use - click the padlock icon in the right hand side of the
navigation (address/url) box, then the "view" button on the page that
presents.
> Better still if it can learn which ones you trust, but just being
> able to view them without having to jump through hoops would be a
> good start.
you can manually approve certificates of course, however there are a few
tools I find useful.
https://addons.mozilla.org/en-US/firefox/addon/2131
this one remembers which certificates were (mistakenly) presented by
which domains, so it won't ask you again. it also does something similar
to allow already-expired certs to function.
the author has a blog here where he discusses aspects of the tool and
related technologies:
http://www.andrewlucking.com/archives/category/remember-mismatched-domains/
currently he is blogging about a recently checked-in patch that will add
similar functionality natively to Firefox, and changes to a host's cert
that makes it redundant for Thunderbird.
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
