[Bug 917299] Re: Security Connection Failure notice

Stefan Peter 917299 at bugs.launchpad.net
Tue Dec 2 12:50:36 UTC 2014


I don't think that this is a  firefox problem: The cert mentioned above
is injected by opendns, a service the provides "secure DNS"
(http://www.opendns.com).

Typically when the requested site is in a blocked category, opends
resolves the domain requested to a own site that contains a page
indicating this blockage. When the requested site was https, opendns
does a redirect  to the https version of this "blocked" notice which
obviously is backed by the opends cert.

Due to the fact that opendns is outright lying to the browser about the
TCP/IP address of the requested site, there is nothing that firefox
could do to detect this and alert the user.

This bug probably should be closed.

-- 
You received this bug notification because you are a member of Mozilla
Bugs, which is subscribed to firefox in Ubuntu.
https://bugs.launchpad.net/bugs/917299

Title:
  Security Connection Failure notice

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/917299/+subscriptions



More information about the Ubuntu-mozillateam-bugs mailing list