I don't think that this is a  firefox problem: The cert mentioned above
is injected by opendns, a service the provides "secure DNS"
(http://www.opendns.com).

Typically when the requested site is in a blocked category, opends
resolves the domain requested to a own site that contains a page
indicating this blockage. When the requested site was https, opendns
does a redirect  to the https version of this "blocked" notice which
obviously is backed by the opends cert.

Due to the fact that opendns is outright lying to the browser about the
TCP/IP address of the requested site, there is nothing that firefox
could do to detect this and alert the user.

This bug probably should be closed.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/917299

Title:
  Security Connection Failure notice

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/917299/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to