http://www.developerfriendly.com/taxonomy/term/42 The taxonomy view with a depth of 0. en http://www.developerfriendly.com/node/45 <p>I'm working on a simple extension for Firefox that would notify the user when an SSL/TLS site's certificate changes. This way an informed user could decide if the certificate change was valid / expected and opt out of an ssl session in questionable circumstances. Is there any interest in such an extension? My friend ask me whether there was a way to do it so I'm working on proof of concept code, I will release it as open source if anyone cares.</p> <h4>Update:</h4> Working proof of concept code released. See XPI attachment below. Note: this is tested in Firefox 3.0 beta 2 and it uses mozStorage (sqlite) to keep track of the url/certificate mappings. This isn't really usable, it's simply a proof of concept with no useful user interface. It will pop up an alert when you visit a site that has changed it's certificate since your last visit. <h4>Update #2:</h4> An updated version of this extension is now available on addons.mozilla.org (it's in the sandbox until it's been reviewed.) You have to log in before you can view the sandbox: <a href="https://addons.mozilla.org/en-US/firefox/addon/6415">Addon #6415</a> http://www.developerfriendly.com/node/45#comments Mozilla mozpad security ssl Sat, 22 Dec 2007 02:20:20 -0600 20after4 45 at http://www.developerfriendly.com