Security issue

Discussion in 'Linux Networking' started by Paulo da Silva, Apr 16, 2015.

  1. Hi!

    I have two firefox profiles.

    In one of them, whem I try to access a given https site, a pop up dialog
    box from ff appears. Here is a translation from pt of that message:

    "You asked Firefox to connect securely to <site here>, but we can not
    confirm that your connection is secure.

    Usually, when you try to connect securely, sites have the security ID to
    prove that you are on track. However, the identity of the site can not
    be verified.

    What should I do?

    If you usually connect to this site regularly without problems, this
    error could mean that someone is trying to pass himself off by this site
    and as such you should not continue."

    Then there are 3 options to choose from ...
    Get me out of here
    Tech. info
    I understand the risk

    What, in simple words, does this mean?
    Why using the other profile this message does not show up?
    Is it possible that each profile has its own certificates' list?
    Where do these certificates come from?

    I have checked security and privacy configurations and couldn't see any
    diffs!

    Thanks for any help.
     
    Paulo da Silva, Apr 16, 2015
    #1
    1. Advertisements

  2. It says "for unknown reasons"
    I checked and in both profiles "MULTICERT - Entidade de Certificação
    001" is there!
    I created a new profile and I couldn't also enter in the site. I created
    a permanent exception and "MULTICERT - Entidade de Certificação
    001" was created under "servers" tab but under a different root than
    that under "authority" tab. Besides, the other previous profile from
    which I can also directly enter the site does not have this entry under
    "servers" tab. So I cannot understand what is different between both
    previous profiles and where the differences, if any, came from.

    Anyway this is a gov site. So I'll add a permanent exception. What is
    causing me problems is the firefox statement "If you usually connect to
    this site regularly without problems, this error could mean that someone
    is trying to pass himself off by this site
    and as such you should not continue."
    But I think this should not be possible because I have at least one
    profile that does not issue this pop up message. Am I right?
    I am referring to the ones listed in the firefox. Does firefox comes
    with them? Is it possible to change them only by visiting some site?
    Are they in the user dir (kubuntu here)?

    Thanks and sorry for too many questions :)
     
    Paulo da Silva, Apr 17, 2015
    #2
    1. Advertisements

  3. Thank you very much for your enlightenments and for the links.

    I'll take a look at them.

    Regards.
    Paulo
     
    Paulo da Silva, Apr 20, 2015
    #3
  4. Paulo da Silva

    John F Guest

    Yes, these are very helpful! :)

    Thanks J G Miller
     
    John F, Apr 22, 2015
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.