False certificates

xiando xiando at xiando.com
Fri Nov 24 09:55:10 UTC 2006


> I noticed that, by connecting to some https domains from some exitnodes, I
> receive a warning of a false certificate. Closing the circuit and using
> another one (so another exit node) makes the things back to normal.
>
> I could identify only one exitnode, have still doubts for 2 others
>
> bach from Germany : 212.42.236.140
>
> Trying to go to login into the e-gold website.... Firefox warned me that
> the certificate I received has the same name than another one that is in my
> browser (the true one!!) but with another signature... Funny hey?

May I say THIS IS A VERY SERIOUS ISSUE and needs to be investigated!!!

Gold is a very heavy element, and though it could melt, it does not pulverize. 
It also does not fall in value like the in-reality worthless (not) Federal 
(who has no) Reserve notes known as Dollars.

I do not admit using the e-gold website, but I find it extremely disturbing 
that Tor exit nodes are trying to present false certs when trying to visit 
the e-gold website. THIS IS A TOTAL OUTRAGE!

We need a in-depth investigation.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20061124/50f74443/attachment.pgp>


More information about the tor-talk mailing list