Skip to content

GitLab

  • Menu
Projects Groups Snippets
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • Trac Trac
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Issues 246
    • Issues 246
    • List
    • Boards
    • Service Desk
    • Milestones
  • Monitor
    • Monitor
    • Metrics
    • Incidents
  • Analytics
    • Analytics
    • Value stream
  • Wiki
    • Wiki
  • Activity
  • Create a new issue
  • Issue Boards
Collapse sidebar
  • Legacy
  • TracTrac
  • Issues
  • #5154

Closed (moved)
(moved)
Open
Created Feb 16, 2012 by Peter Eckersley@pde

non-Torbutton SSL Observatory + hotel network => lots of cert warnings

If the user enables the SSL Obseravtory in non-Torbutton mode, and they land on a network that MITMs TLS, the browser will render a stream of certificate warnings caused by Observatory submissions.

What we should do instead is save up the certs for submission once the network stops attacking us.

This can be achieved with nsIBadCertListener2.

This is probably blocking the popup for the Observatory for non-Torbutton users.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking