[tor-bugs] #2293 [EFF-HTTPS Everywhere]: detect man in the middle attack to https

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Thu Dec 16 09:57:37 UTC 2010


#2293: detect man in the middle attack to https
----------------------------------+-----------------------------------------
 Reporter:  cyrano                |       Owner:  pde
     Type:  enhancement           |      Status:  new
 Priority:  normal                |   Milestone:     
Component:  EFF-HTTPS Everywhere  |     Version:     
 Keywords:                        |      Parent:     
----------------------------------+-----------------------------------------
 Some compagny use "https proxy" that deliver a new certificat at first
 connection or during an install. So every https connection use the same
 certificat deliver by the compagny to filter/read the content of the
 connection.
 The only way to catch it is to never accept the new certificat but when
 it's done your screwed.
 It be will be great to detect that every https connection use the same
 certificat to warn the user.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2293>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list