Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.networking > #3348
| From | J G Miller <miller@yoyo.ORG> |
|---|---|
| Newsgroups | comp.os.linux.networking |
| Subject | Re: Security issue |
| Date | 2015-04-16 21:21 +0000 |
| Organization | A noiseless patient Spider |
| Message-ID | <mgp947$joa$1@dont-email.me> (permalink) |
| References | <mgoftc$155$1@speranza.aioe.org> |
On Thursday, April 16th, 2015, at 15:10:53h +0100, Paulo da Silva asked: > What, in simple words, does this mean? The most probable cause is that the certificate which the site is presenting is not a trusted certificate for that site. The cause of this can be that the certificate is self signed and has not been purchased from Thwaite, Verisign, or another recognized CA, or that the certificate has expired, or that the certificate is for one host name but is being used for another related host name. So in cases such as this, the best thing to do is to click on "I understand the risks" then in the new dialog to click on "get certificate" and "view certificate" and very carefully read the details and the reason why Firefox thinks the certificate is not fully acceptable. > Is it possible that each profile has its own certificates' list? Yes this is most probably the reason that in one profile you clicked to accept the certificate and store it permanently as an exception. You can check the certificates list which have been accepted via Edit -> Preferences menu, then Advance button, then Certificates tab, then View Certificates button. > Where do these certificates come from? From the site that you visit using the https address. > I have checked security and privacy configurations and couldn't see any > diffs! But obviously not the stored certificates list under advanced. A good example of when accepting a certificate is valid, although the certificate is not fully valid, would be when you access the https interface on your LAN router instead of the http addres. The certificate will have been issued to Cisco or D-link or whoever, but since it does not know which local domain address you would be using, thus it cannot fully conform to the required authentication standard, Firefox complains as it should.
Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Security issue Paulo da Silva <p_s_d_a_s_i_l_v_a_ns@netcabo.pt> - 2015-04-16 15:10 +0100
Re: Security issue J G Miller <miller@yoyo.ORG> - 2015-04-16 21:21 +0000
Re: Security issue Paulo da Silva <p_s_d_a_s_i_l_v_a_ns@netcabo.pt> - 2015-04-17 01:38 +0100
Re: Security issue J G Miller <miller@yoyo.ORG> - 2015-04-18 20:21 +0000
Re: Security issue Paulo da Silva <p_s_d_a_s_i_l_v_a_ns@netcabo.pt> - 2015-04-20 01:55 +0100
Re: Security issue "John F" <j@j.ii> - 2015-04-22 13:36 -0700
Re: Security issue Christian Riechers <chriechers@netscape.net.invalid> - 2015-04-18 07:52 +0200
csiph-web