1
about:preferences#advanced -> Certificates -> ViewCert

In Firefox, I can add my own self-sign cert to browser. However, in latest TBB(6.0+) I can't add certificate.

This is annoying because I have to make a exception every time to connect to HTTPS.

Is there any method to add certificate to TBB?

  • 1
    Surely you can just set an exception as required? Adding one permanently is actually a unique and detectable fingerprint, it would be long-term identifying state... – cacahuatl Jul 13 '16 at 16:12
  • @canonizingironize Yeah, if an attacker had access to the computer that stored the exception. That data is stored locally in the browser. If the computer isn't physically secure, it doesn't matter what data is stored where. – SuperSluether Jul 21 '16 at 2:05
  • @SuperSluether lol. uh, no. if you automatically accept the exception that is thrown without first having to manually add the exception, your browser will behave clearly and visibly differently from every other tor browser user to an outside observer (the exit, the server itself or any observer in between). – cacahuatl Jul 21 '16 at 2:22
  • So you're saying that the Tor browser shares its security exceptions with every website it visits? Didn't think so. The browser will only behave differently for that one website. – SuperSluether Jul 21 '16 at 14:01
  • @SuperSluether yes. It doesn't share it directly but the browser behaves differently in a way that is trivial to measure. Any website can measure it indirectly. Any exit or point between the exit and the site can also measure it indirectly, and other exits for other sites could force situations where they get to measure it. This could easily be done, in a variety of ways. – cacahuatl Jul 21 '16 at 17:26
1

Permanent exceptions can't be made in Private Browsing mode. Go to about:preferences#privacy and either uncheck "Always use private browsing mode" or select "Remember History."

This will save your browsing history, download history, and save cookies by default. To fix, uncheck "Remember browsing and download history" and "Remember search and form history." For cookies, accept them, but keep until "I close Tor Browser."

  • 1
    N.B. this will break some of Tor Browsers protections. – cacahuatl Jul 21 '16 at 2:34

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.