3

In firefox sessions without a tor proxy, it seems worthwhile to use an extension that helps to validate SSL certificates (e.g. Perspectives or Certificate Patrol). Is there any way to handle this problem with the Tor Browser Bundle?

  • // , .onion addresses don't need certificates, right? – Nathan Basanese Jun 8 '15 at 7:11
2

You can check manually, not as easy as a plugin/extension but...

Steve Gibson makes some handy tools for security, like this section- https://www.grc.com/fingerprints.htm

Simply comparing a fingerprint from his server and your browser as being identical OR not, as he explains how, will validate if the CA is being spoofed and/or intercepted pretty quick.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.