Website Certified by an Unknown Authority?

[2600denver]

That just means that hackshaven doesn't have their SSL cert certified by a
trusted (according to firefox) authority such as verisign inc. The traffic
to and from hackshaven is still encrypted so your exit node will be blind
assuming they don't make their private encryption key public. Could it be
there is an embedded image in a page that links to
https://hackshaven/img.jpg?

On 4/8/06, Pyllyukko <pyllyukko at maimed.org> wrote:
>
> Hello everybody.
>
> I Have a weird problem with Tor. Every once in a while when I'm happily
> browsing the net with Firefox 1.5.0.1 using Tor 0.1.1.17-rc, I get this
> error
> from Firefox, saying "Website Certified by an Unknown Authority... Unable
> to
> verify the identity of www.hackshaven.com as a trusted site". The message
> always warns me from the same site, www.hackshaven.com, the strangest part
> is
> that I'm not trying to access the site at all.
>
> It doesn't matter what site I'm trying to access, or is Firefox only
> updating
> my RSS feeds. I tried to sniff my traffic with Ethereal, but it didn't
> seem
> that my host was accessing the hackshaven ip at all.
>
> I noticed that there is a Tor node named "hackshaven", and it shares the
> same
> ip with the site, so I'm guessing it's the same host=) I also tried to add
> the node to the excludenodes list, but it didn't seem to do any good.
>
> So my question is, what the hell is happening here? Sounds really fishy to
> me.
> Could it be something involving the way the SOCKS proxy works? But doesn't
> it
> interact with the Tor nodes in a "different level"? Is hackshaven trying
> to be
> a man-in-the-middle, or is this something else?
>
> Please explain this to me, I'm confused.
>
> Sincerely,
> pyllis.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20060408/0a235eb8/attachment.htm>