[Bug 917299] Re: Security Connection Failure notice
Stefan Peter
917299 at bugs.launchpad.net
Tue Dec 2 12:50:36 UTC 2014
I don't think that this is a firefox problem: The cert mentioned above
is injected by opendns, a service the provides "secure DNS"
(http://www.opendns.com).
Typically when the requested site is in a blocked category, opends
resolves the domain requested to a own site that contains a page
indicating this blockage. When the requested site was https, opendns
does a redirect to the https version of this "blocked" notice which
obviously is backed by the opends cert.
Due to the fact that opendns is outright lying to the browser about the
TCP/IP address of the requested site, there is nothing that firefox
could do to detect this and alert the user.
This bug probably should be closed.
--
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/917299
Title:
Security Connection Failure notice
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/917299/+subscriptions
More information about the Ubuntu-mozillateam-bugs
mailing list