[tor-bugs] #30107 [Applications/Tor Browser]: Self-sign .onion certificate (not CA) does not have padlock icon

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Apr 10 08:44:03 UTC 2019


#30107: Self-sign .onion certificate (not CA) does not have padlock icon
--------------------------------------+--------------------------
 Reporter:  cypherpunks               |          Owner:  tbb-team
     Type:  task                      |         Status:  reopened
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------
Changes (by cypherpunks):

 * status:  closed => reopened
 * resolution:  not a bug =>


Comment:

 Excuse me gk, I know that ticket.

 The problem is:

 > Green onion + Padlock icon
 https://iejideks5zu2v3zuthaxu5zz6m5o2j7vmbd24wh6dnuiyl7c6rfkcryd.onion/about
 (cert mismatch, wrong hostname!!)

 > Green onion + Padlock icon
 duckduckgo.com's onion

 > Green onion and *no* padlock (but connection is tls1.2)
 https://hello.v3onionnamehere.onion
 (hostname ok, just same issuer)


 Why?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30107#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list