3 ms·
What? No browser displays a notification when a website changes its cert. It doesn't even show you a notification if it changes its key, that's the whole point
by sbierwagen 11y ago
What? No browser displays a notification when a website changes its cert. It doesn't even show you a notification if it changes its key, that's the whole point of key pinning: https://wiki.mozilla.org/SecurityEngineering/Public_Key_Pinning https://wiki.mozilla.org/SecurityEngineering/Public_Key_Pinn... (A pin failure results in a non-bypassable HTTPS error: https://projects.dm.id.lv/Public-Key-Pins_test https://projects.dm.id.lv/Public-Key-Pins_test )
- TheDong 11y agoThe most popular way to get that is: https://addons.mozilla.org/en-US/firefox/addon/certificate-patrol/ https://addons.mozilla.org/en-US/firefox/addon/certificate-p... I personally no longer use it because of all the noise, even before lets encrypt.