[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] Using passwords with TOR

To: tor-talk@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-talk] Using passwords with TOR
From: Lee <ler762@xxxxxxxxx>
Date: Sun, 22 May 2011 19:05:17 -0400
Delivered-to: archiver@xxxxxxxx
Delivery-date: Sun, 22 May 2011 19:05:33 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:in-reply-to:references:date :message-id:subject:from:to:content-type; bh=3cXvus7WWtCiQ9FYT8Nm1IeutwxVw2EJXiWG+G6y03A=; b=Va3mXO6TOvZ1b7HN2tX0OgJqXj3IXRx11E1zC/+fUP9ntrjmNiq0sIl0cGHsvOGwtU 4wpc/SsX5qOutb/1Letn8zm8S1hHKRIKUcv9j3p96V7TEptrVh9/q0h4eVEr7TKwnVpD 06YFrxomT1QdgR/fRsEvPG4QsNsokynsuPEH4=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; b=QWRGLzNavAXweEeYuJQsiWz4EbGBknWBa3WhDP8XFnlAXcDVd5/WhB7SRPEWkRDpZu mNKn87C6heQ49gHQRsoG+VISxqz24w2iEdRgvnBZzd/QQ9YJvr/Cze5tF9Ah2dW5yX1e NoFr7D3WLZxeozD9SjDY8drvj0sxrsv3zf6as=
In-reply-to: <4DD97698.8060505@xxxxxxxxxxxxxxxxxx>
List-archive: <http://lists.torproject.org/pipermail/tor-talk>
List-help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-id: "This mailing list is for all discussion about theory, design, and development of Onion Routing." <tor-talk.lists.torproject.org>
List-post: <mailto:tor-talk@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
References: <50832.73757.qm@xxxxxxxxxxxxxxxxxxxxxxxxxxxx> <BANLkTi=HBmygNbu1G3++rJptAta_n_mFtw@xxxxxxxxxxxxxx> <BANLkTi=zVnMg-yi89RheAa0DUSsWdRb7NA@xxxxxxxxxxxxxx> <4DD9016D.10603@xxxxxxxxxxxxxxxxxx> <BANLkTi=a9PqCUNPdcs-64GT9PxPmK8JdCQ@xxxxxxxxxxxxxx> <4DD97698.8060505@xxxxxxxxxxxxxxxxxx>
Reply-to: tor-talk@xxxxxxxxxxxxxxxxxxxx
Sender: tor-talk-bounces@xxxxxxxxxxxxxxxxxxxx

On 5/22/11, tor@xxxxxxxxxxxxxxxxxx <tor@xxxxxxxxxxxxxxxxxx> wrote:
> On 22/05/2011 20:03, Lee wrote:
>
>>> I use a Firefox addon called Certificate Patrol. It keeps a record of
>>> certificates that https websites serve. It then alerts you if they
>>> change. It displays information about the old certificate next to the
>>> new certificate so you can tell if the issuer has changed, and if the
>>> old cert was due to expire anyway.
>>>
>>> Should come in handy if you come across a Tor Exit node that is somehow
>>> generating "valid" certificates for a domain and MITM'ing you.
>>
>> yes - that looks helpful.  Which version of Firefox are you using?  I
>> tried it with FF 4.0.1 and no matter what the settings, javascript
>> enabled/disabled, noscript addon enabled/disabled I couldn't get a
>> popup for a newly accepted cert :(
>
> Strange. I'm using 4.0.1 on OSX. I just turned on the functionality to
> always popup info about new certificates and I don't think that is
> working for me either. It definitely pops up stuff when the certificate
> changes though. Maybe worth a bug report?

Known issue - latest review says
  It turned out that there was a lot more than just this preference
broken in v1.8.2 ;@)
  Anyone using v1.8.2 should either rollback to an earlier version or
install the new build v1.8.3.

I was about ready to revert to FF 3.6.17 to see if that made any
difference.  Thanks for the confirmation that it wasn't just my
install that had a problem!

I haven't been able to find a site where the certs change, but at
least with 1.8.3 I get a popup about a new cert

Lee

>
> --
> Mike Cardwell https://grepular.com/  https://twitter.com/mickeyc
> Professional  http://cardwellit.com/ http://linkedin.com/in/mikecardwell
> PGP.mit.edu   0018461F/35BC AF1D 3AA2 1F84 3DC3 B0CF 70A5 F512 0018 461F
>
>
_______________________________________________
tor-talk mailing list
tor-talk@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

References:
- [tor-talk] Using passwords with TOR
  - From: Dr Frank
- Re: [tor-talk] Using passwords with TOR
  - From: Lee
- Re: [tor-talk] Using passwords with TOR
  - From: grarpamp
- Re: [tor-talk] Using passwords with TOR
  - From: tor
- Re: [tor-talk] Using passwords with TOR
  - From: Lee
- Re: [tor-talk] Using passwords with TOR
  - From: tor

Prev by Author: Re: [tor-talk] Using passwords with TOR
Next by Author: Re: [tor-talk] 504 Proxy loop detected by Polipo
Previous by thread: Re: [tor-talk] Using passwords with TOR
Next by thread: Re: [tor-talk] Using passwords with TOR
Index(es):
- Author
- Thread