[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] Disabling the warning for self signed certificates in Tor Browser

To: tor-talk@xxxxxxxxxxxxxxxxxxxx,antispam06@xxxxxxx
Subject: Re: [tor-talk] Disabling the warning for self signed certificates in Tor Browser
From: Elrippo <elrippo@xxxxxxxxxxxxxxxxx>
Date: Wed, 23 Apr 2014 11:21:47 +0200
Delivered-to: archiver@xxxxxxxx
Delivery-date: Wed, 23 Apr 2014 05:26:45 -0400
In-reply-to: <535782B6.4060409@xxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
References: <534E956A.6020302@xxxxxxx> <5356120E.9000207@xxxxxxxxxxxxxx> <535782B6.4060409@xxxxxxx>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-talk" <tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On that note.

https://cacert.org root certificates are missing mostly.
You have to install them by your own. Personally i prefer cacert.org, because firstly you have to identify yourself and secondly you actually are meeting assurers face to face with your passport in hand which will grant you points from 5 to 20. At 50 points you get a server certificate for 2 years.

That's as close as you can get to a so called CA!

On 23. April 2014 11:07:02 MESZ, antispam06@xxxxxxx wrote:
>Georg Koppen:
>> antispam06@xxxxxxx:
>>> Could Tor Browser kill or minimize the warning triggered by entering
>a
>>> site with a self signed certificate?
>> Killing is not a good idea. What do you mean with "minimize"?
>
>A self-signed certificate is better than no certificate. Given the
>trouble with a CA, it might be just as good as a CA certificate.
>
>Anyway, This Connection is Untrusted. Good. The Aholes from Firefox
>never bothered to write the same warning about plain HTTP connections.
>Ain't it funny? I know at least a dozen sites that do password
>authentification through HTTP. Are they any better?
>
>And I can't just browse the site after that warning. I can go to
>disney.com with "Get me out of here".
>
>Than there is that user friendly "Technical Details" which would make
>any granny click and get her glasses on 'cuz it's time to check the
>signatures. Maybe for you, the tech guys, that means something to be
>thankful for being so easy to reach. I don't think that the Iranian
>disident or the Turkish journalist would feel the same next time.
>
>I click I understand the risks. And nothing. I acknowledged the risk.
>Yet the browser won't let me proceed. So you have two extra paragraphs
>of curses. If they were so interesting, why aren't they on the first
>page?
>
>So finally I can add an exception. Which I have to confirm.
>
>Why not something like the NoScript banner/warning?
>
>Why not the same curses on ANY unencrypted page, or at least those that
>present the user with a password field?
>
>I checked that with Autistici.org. They have a wonderful AES 256bit
>key.
>All my online banking is done over RC4 128bit at best. That is as
>strong
>as Wikipedia! Autistici.org does generate that need for three extra
>pointless clicks. Any of my banking sites generates nothing. Any of the
>sites and forums that do authenticate through HTTP generate nothing.
>
>Sure it sounds like a conspiracy. But why feed the dangerous game of
>the
>CAs? Why do the free software has to fill the pockets of these
>companies? Why kick the sites that do care about their users in the
>teeth unless they pay for the CA ransom?
>
>--
>tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
>To unsubscribe or change other settings go to
>https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

- --
We don't bubble you, we don't spoof you ;)
Keep your data encrypted!
Log you soon,
your Admin
elrippo@xxxxxxxxxxxxxxxxx

Encrypted messages are welcome.
0x84DF1F7E6AE03644

- -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: GnuPG v1.4.11 (GNU/Linux)

mQINBFH797MBEAC0Y0NeI7lmDR9szTEcWuHuRe0r/WjSRC0Nr5nXsghuMcxpJ3Dd
BOBimi4hdMMK4iqPVMwNw6GpKYR3A9LHHjbYRXHUKrJmB+BaJVyzJXN5H6XvxTTb
UfX+DaXAGJW/G+3cBB3qm/QaU8QGkBKfXq0DLTaTGPkGKxEAldj/8onGZhawdJs+
B92JrW+S2HDh15pIuXzSqe7eCcIOdvvwfWe0fJi2AraA7LYGpxP6GcC/b9JJpbq5
Y6DfE2Aun9ZK3iHqURyrms0Whbv1CgmUahL2MVYCsTsXwe0GwlAxxKvjXAiXuo+R
9wO5wsXvVVSVNqsk9Yqi+wYzdPKndTU0GyxSApQHroF+cxaZ8Lk0xloj18+LdCSs
e5IiTSXH0MMsDdWWdHlrgk+bgDG+0Gu3ne4vMwGdKO7AhYgQW/ueMy4RnkG/nsV9
jry5BO4gGAI1Ij8KvqUzEnvJFGE3ptJogU+zazWWDUWmL3ecKb3aDRlJFnZ3kJ5h
q8GolZVjpk99V+4B5WVRPXdej/p5J19tXycK/jdNmr4oC8NyUhIpe8xHELnfoB4z
+rxiTx+KMnW0rY8EQg8O2ixEYt5my90IwQkxcxIxextVrqjJjYn8extc2/v8yGzI
KmTEJxdADB5v/Jx4HiLHNDSfBUb8gfONCkNSTYvTcSwTjWzHOkXeE/9ZbQARAQAB
tD5lbHJpcHBvIChrZWVwIHlvdXIgZGF0YSBlbmNyeXB0ZWQpIDxlbHJpcHBvQGVs
cmlwcG9pc2xhbmQubmV0PokCOAQTAQIAIgUCUfv3swIbLwYLCQgHAwIGFQgCCQoL
BBYCAwECHgECF4AACgkQhN8ffmrgNkT8+BAAoAXBqu4/O2Cs5FSWWZpzgScNEgq7
uHhOKeYmRfgKlOUPoYlPB1DBqdOAXSKb9OvsmyOvpoGnqijB7aAJBoyQYW/OCQgd
U8L4eTCf4yRZnfFLdgskcPfN1p0Rs/yinGEooBJFtYa7mT6J0UTW2JjCLZK2AFCW
oF+KBu5JICXGBXigb2ZbX1jWjxP5H1RidQw6HF5z4z34SjLWAOOeZ8B/Xfz6Fs0s
IAuLu2O4HE4DI8Qu196LhSVHHgr3uMTkvN1t5nKwyjrRQztwXXk9qIomII3ydNYb
BYAGdWNNMfLb1kmDwC5wQHAFvSP1aiMF3aKAY+gl2wXSGO6JqM0SteJS3dytIljI
kzu0atc9HuGs/HDQgdmpAS4WU2YefEr/WieltSiAKlwuC+3wg+CONJ6TE1vgNDU/
axerttb0jq7UQb/nAp05bsrB7XH1Vs+1ON9lUPEfWRmwQcrVK5JUrUWa/4tA/UeM
XvFcPFtFluGTlLewgJIqcvjPXFwpbDZprXJsMkwew/A6B6n3+0sbgf7p3QSGkVbi
dwQAymTbHdYqLnbcnKZhjto3Wjw1J5QB2wuiRYlpjV3i7AWTGlqoSTOWCCV+HamQ
qeFYNYAWNFx3+J/oi7xDi8t9bHVNA205equ+y2sj3G5uGJ6LSHQ8AXp9uOipUUvU
1MJN0yLXr9PIwvi5Ag0EUfv3swEQAL0+MnxHGrTjSYdfdua4SBpmytDONM1EngeY
s+WyaC/760MughKbaysI/nK2LB1vnwEY7f3NM4fxBx8u2T7VBm6Ez6Fs23Bb8Rkz
f97bPSdxCmg64GPHfLA9uwTIXcYS+MpI86WOf6eWY0rRpf7Y9Nl7YoUNvzOyUPqc
ggdcnHce8zYv7A/WS8flZDm8tVFPsHrQDEwNMws7ZhiNnHkeZeRJrvCuB7oEVich
O/ROYoA5o6NozWYQbjxe1f6Yur4Q10qgVcxVnyLFJSbg6vZSzL7KYh3Z5iBOzPHt
7cwEDrW8W4Kl2Qj8rhJ4Wxs94CAtua7IXK44sVZWQbyHcOXRikgGMZKkEZzVCQa5
KD1u1ZrcBCyuMAir0hsmS3jhCUwpiE2c3SRk8O8CgixhTcBk0X/k9ZFu3Hbi1JMB
FLzs/Nq3tYAYvVivhPloSxmYBPsafYHCZM83yBNNsralXh5zjB+di90G+AMXt2PN
LTcdovZuWtC0s8/jrx+zv/AA4FAGYU9OVl+YL9ybFX8gSdMEcixyzQcKfiFBjpWv
5iFrwIuDlaXMcheyrhc9aGOxfx44OXc505+VjO/1Q/8EOWlJ6UwOi6GMkj5T+RFJ
MDyP0UixS7dt6wTuD5t6PRuyWWxZswgrbL9hjwGFr154Z19TWeNWc23pWtUvQJos
UCxl2nFHABEBAAGJBD4EGAECAAkFAlH797MCGy4CKQkQhN8ffmrgNkTBXSAEGQEC
AAYFAlH797MACgkQJEPd69lQ0evA+Q/+M7lSFlrQWiRsFqDjh+kTJc+0OEBCvnfo
N2KPyXXbfc//qup55PfEygE6C60zvrlv3WE33GZ5GS5MLuDMP82b+a5Yt16NQU7L
WtAg1g0S0BvazW+28TgnfO8bhbGaFeE9ccw3xLmlbwZQ3f3LtMKdwFIROiG6hvAs
9U54QYti3tv9DowRYYWpdr0Ga8RqeGNtCKc0v2opy51MpzKWjwUW0i3XlSlyY8Lj
1KT8PyznNPw32nYpmDizz+0OUJNnn/kT+GnFoR3DJnFosTOrnxFJp+N+nejMp/gW
r9NM0/E7H+P53IiytBOt5/0vsOaCFGdYGhKEjmJi3dHS4Xk1ObD1mjdD1YDOlWWU
3Md6BDHd4W7Q8gT7oQfTIMLd3HzV+WNPIdocPLBaeA/tRD8Pg5CCmncAmSub4F5T
An7FlnACtSOv3cIWQ0TymS42DihDaJ5d1RvNzKw+zHYdPvf471JFZR3TDhkPbLIr
9czR7kbpnXRwchgwXQn306NVWf37TgA8wpbnFTazZ38iOeqcb9oKprqnbgEdr3PN
OhKSlMTkzAqf3MEi2Fyua4BADMhS3oBwCRgDTlt6wquEytpNSlZaHnyiyIgOpekF
Uy5K3w8NhHqeifRPrNb/UcCbXtXz+puqIEZHMenpv6FRlTTKpdoHoVXSkp1TPMGN
/VaCiLbP4Z3xEw/9EbAJJkhmmx1Qw3ueoqc4h1MmhUtIdxSZ/oA9SjwlnY++zvaZ
6w1wTS4P+OUkETNDtItdpxXMJ9qfSy9voAQc2K43WMZCCmpPJYSdqaZZNPFj+Ne8
6FNtNKuUkXREybpHwlVAXnHzInmFOOM9RAmF70r3zEmKt77W1ztBLo2o9X79gPgL
u9ThgrH6Oc2k46n+9nc3joccr7miiX/bp976DNWcWdOYThiSSOCb8Zw9/Zs935i1
wUVkYTj24tmBH4H5ov9ib7RPmU21ru458RbUKG0ONAqBtAHNyXHzUnXsrke+D4VW
MI06YcXSk8YeYgQ8GxgHQc+W2bb8LIbKN1hEYJ0wzM62vKR2/Oiwuf8lXutIKTuz
+v7Vj1PQd66DGHsxtWRaWnr1c54JTL2wICHJYKFH4grp7864+GL/uQ1O/Z/XxVku
E1JQ/AnwBGU1M1S6otwWGWVRjzEzQtxsfcCEPvV/9td3FIFQAbGTPb+48XFU+TY9
8AlcXBlDzXq7c5f8Evn/oSIsZDt63K4HNTmMGqOTl/p1aA0e4eyX76LczY06rDP5
GMSNs+AHmYgZiS4RYhRUIvS9uLXMnnDAMYst0SDl2orDUUeHBTzu0rchyknBZMGP
p5wQuWQ9CFlV+dj3UYbrBwC1lTkAMXRG2vlhA0V0TZqos7A5D4VHgSUQQjE=
=otlL
- -----END PGP PUBLIC KEY BLOCK-----


-----BEGIN PGP SIGNATURE-----
Version: APG v1.1.1
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=KWkG
-----END PGP SIGNATURE-----

-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

References:
- [tor-talk] Disabling the warning for self signed certificates in Tor Browser
  - From: antispam06
- Re: [tor-talk] Disabling the warning for self signed certificates in Tor Browser
  - From: Georg Koppen
- Re: [tor-talk] Disabling the warning for self signed certificates in Tor Browser
  - From: antispam06

Prev by Author: Re: [tor-talk] Orbot and ChatSecure not working on CyanogenMod
Next by Author: [tor-talk] Private keys at risk due to HeartBleed: Are we sure?
Previous by thread: Re: [tor-talk] Disabling the warning for self signed certificates in Tor Browser
Next by thread: Re: [tor-talk] Disabling the warning for self signed certificates in Tor Browser
Index(es):
- Author
- Thread