Tor Stack Exchange is a question and answer site for researchers, developers, and users of Tor. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

In firefox sessions without a tor proxy, it seems worthwhile to use an extension that helps to validate SSL certificates (e.g. Perspectives or Certificate Patrol). Is there any way to handle this problem with the Tor Browser Bundle?

share|improve this question
// , .onion addresses don't need certificates, right? – Nathan Basanese Jun 8 '15 at 7:11

You can check manually, not as easy as a plugin/extension but...

Steve Gibson makes some handy tools for security, like this section-

Simply comparing a fingerprint from his server and your browser as being identical OR not, as he explains how, will validate if the CA is being spoofed and/or intercepted pretty quick.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.