[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] How to pin the SSL certificate for torproject.org?

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-talk] How to pin the SSL certificate for torproject.org?
From: grarpamp <grarpamp@xxxxxxxxx>
Date: Fri, 6 Jul 2012 16:16:19 -0400
Delivered-to: archiver@xxxxxxxx
Delivery-date: Fri, 06 Jul 2012 16:15:53 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=yle+4XudyR7tPiRDUw9ck2kSXZS1+n1KdLCzxjHQyCo=; b=ZRbFhbHc8hIoYnXluhheNk3sggd9kB40Dyvko4qOFAFQKN7qTCWR6BWcOLOI8KGenG NdMbJjGSNfAsitXB00aACNXJpMjvGUbhqY0+vW9FHO9NZozhBp/AW2P6BZPxkk3j8S59 jCSz2y+ZZTx/18PTHP9bDzcJXciNODK/VVQLP5AkkDf6OOSzmeidhDDIDh6uO07XwQ/N eDX8SR2k9dwbonA42iKMOXcXgfKzTnW/EyISa0d1nPhAkFW/MxmoyPFkSkol4bs7XQXo VsEFeAiSRa7KfPELmV8yjEw3LQvAM8nqiz4eD1N9sZJ23SIKf05yjycdVNh4jAgh0yJO VI5Q==
In-reply-to: <97e8925c07ece62c1a591a1c4997a28e@xxxxxxxxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-talk>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "all discussion about theory, design, and development of Onion Routing" <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
References: <336e29021550244dbe7fb60b1a23cf60@xxxxxxxxxxxxxxxxxxxx> <97e8925c07ece62c1a591a1c4997a28e@xxxxxxxxxxxxxxxxxxxx>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx

Fetchmail, msmtp, etc can all connect to a host,
take that cert fingerprint, compare it to the one you've
configured, and drop the connection if they differ.

Doesn't FF support this kind of fingerprint scheme?
Or even simply storing the site's cert for comparing.
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

Follow-Ups:
- Re: [tor-talk] How to pin the SSL certificate for torproject.org?
  - From: proper

References:
- [tor-talk] How to pin the SSL certificate for torproject.org?
  - From: proper
- Re: [tor-talk] How to pin the SSL certificate for torproject.org?
  - From: proper

Prev by Author: Re: [tor-talk] [Need quick help] 30+ mbps node taken down by host
Next by Author: Re: [tor-talk] How to pin the SSL certificate for torproject.org?
Previous by thread: Re: [tor-talk] How to pin the SSL certificate for torproject.org?
Next by thread: Re: [tor-talk] How to pin the SSL certificate for torproject.org?
Index(es):
- Author
- Thread