3 ms·
Yeah.. That's suspicious.. Firefox uses it's own CA list, so if your install of firefox is up to date, and your system clock is correct then you are potentially
by darkr 11y ago
Yeah.. That's suspicious.. Firefox uses it's own CA list, so if your install of firefox is up to date, and your system clock is correct then you are potentially being MITM'd...
If that is the case then your browser is exhibiting correct behavior.
For me, I can see that the root CA is USERTrust (SHA-384 sig, interestingly), and the server is presenting a valid intermediate (Gandi - also using a SHA-384 signature), then the site certificate (SHA-256 sig).
There is a secondary certification path though, coming from a old SHA1 AddTrust Root (but this is also in my trust store for Firefox).
- bphogan 11y agoSame results on Chrome. I am not on a corporate network - I am at home. Are there tools I can use to work my way through this?
- darkr 11y agoOdd. Chrome also uses it's own trust store, distinct from system and Firefox.. OpenSSL is a good starting point: openssl s_client -connect tails.boum.org:443
- pki 11y agotype 'danger' on the warning page
- ossreality 11y agoWHY THE FUCK IS EVERYONE TELLING HIM TO BYPASS WHAT LOOKS LIKE A LEGIT MITM ATTEMPT? Oh my god. It's like none of you stopped to think for even a fraction of a second.