3 ms·
> Some firefox add-ons to help defend against mitm: In theory yes, but not more than 10 minutes ago Cert Patrol noticed that Amazon have changed the CA for th
by dingaling 13y ago
> Some firefox add-ons to help defend against mitm:
In theory yes, but not more than 10 minutes ago Cert Patrol noticed that Amazon have changed the CA for the SSL cert for an image server.
What am I supposed to do? It is interesting info, but if I reject the cert then I can't be sure my connection is secure. If I accept it... I can't be sure my connection isn't MiTMed.
The human factor is always the weak link.
- peterwwillis 13y agoThe nature of certificates means a site can use more than one. If you use such a site, you can try to notice the pattern of which certs they use and if it changes, but it's not going to be perfect. If you choose to only use sites which use one certificate it might be a big help. Here are some more useful plugins for Firefox: HTTPS Everywhere (preset list of sites to use only HTTPS on) https://www.eff.org/https-everywhere https://www.eff.org/https-everywhere Safe (shows you when a site might not or isn't using HTTPS) https://addons.mozilla.org/en-US/firefox/addon/safe/ https://addons.mozilla.org/en-US/firefox/addon/safe/ If you want to keep your information private, don't put anything on an internet-connected device that wasn't encrypted on an airgapped computer first.