Arcane Jill wrote:
Can anyone tell me... is there a Firefox plugin which allows one to view the fingerprint of the SSL certificate of each page you visit (e.g. in the status bar or address bar or something)?

  Never needed one. The hoops involved aren't THAT large, at least in
the version I use - click the padlock icon in the right hand side of the
navigation (address/url) box, then the "view" button on the page that
presents.

Better still if it can learn which ones you trust, but just being able to view them without having to jump through hoops would be a good start.

you can manually approve certificates of course, however there are a few tools I find useful.

https://addons.mozilla.org/en-US/firefox/addon/2131

this one remembers which certificates were (mistakenly) presented by which domains, so it won't ask you again. it also does something similar to allow already-expired certs to function.

the author has a blog here where he discusses aspects of the tool and related technologies:

http://www.andrewlucking.com/archives/category/remember-mismatched-domains/

currently he is blogging about a recently checked-in patch that will add similar functionality natively to Firefox, and changes to a host's cert that makes it redundant for Thunderbird.

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to [EMAIL PROTECTED]

Reply via email to