[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Website Certified by an Unknown Authority?



That just means that hackshaven doesn't have their SSL cert certified by a trusted (according to firefox) authority such as verisign inc. The traffic to and from hackshaven is still encrypted so your exit node will be blind assuming they don't make their private encryption key public. Could it be there is an embedded image in a page that links to https://hackshaven/img.jpg?

On 4/8/06, Pyllyukko <pyllyukko@xxxxxxxxxx> wrote:
Hello everybody.

I Have a weird problem with Tor. Every once in a while when I'm happily
browsing the net with Firefox 1.5.0.1 using Tor 0.1.1.17-rc, I get this error
from Firefox, saying "Website Certified by an Unknown Authority... Unable to
verify the identity of www.hackshaven.com as a trusted site". The message
always warns me from the same site, www.hackshaven.com, the strangest part is
that I'm not trying to access the site at all.

It doesn't matter what site I'm trying to access, or is Firefox only updating
my RSS feeds. I tried to sniff my traffic with Ethereal, but it didn't seem
that my host was accessing the hackshaven ip at all.

I noticed that there is a Tor node named "hackshaven", and it shares the same
ip with the site, so I'm guessing it's the same host=) I also tried to add
the node to the excludenodes list, but it didn't seem to do any good.

So my question is, what the hell is happening here? Sounds really fishy to me.
Could it be something involving the way the SOCKS proxy works? But doesn't it
interact with the Tor nodes in a "different level"? Is hackshaven trying to be
a man-in-the-middle, or is this something else?

Please explain this to me, I'm confused.

Sincerely,
pyllis.